const ServiceAPIVersion = "2019-06-10"

const ServiceID = "SSO OIDC"

type Client struct {
	// contains filtered or unexported fields
}

type CreateTokenInput struct {
	// The list of scopes that is defined by the client. Upon authorization, this list
	// is used to restrict permissions when granting an access token.
	Scope []*string
	// The unique identifier string for each client. This value should come from the
	// persisted result of the RegisterClient () API.
	ClientId *string
	// The location of the application that will receive the authorization code. Users
	// authorize the service to send the request to this location.
	RedirectUri *string
	// Supports grant types for authorization code, refresh token, and device code
	// request.
	GrantType *string
	// The token used to obtain an access token in the event that the access token is
	// invalid or expired. This token is not issued by the service.
	RefreshToken *string
	// Used only when calling this API for the device code grant type. This short-term
	// code is used to identify this authentication attempt. This should come from an
	// in-memory reference to the result of the StartDeviceAuthorization () API.
	DeviceCode *string
	// The authorization code received from the authorization service. This parameter
	// is required to perform an authorization grant request to get access to a token.
	Code *string
	// A secret string generated for the client. This value should come from the
	// persisted result of the RegisterClient () API.
	ClientSecret *string
}

type CreateTokenOutput struct {
	// Indicates the time in seconds when an access token will expire.
	ExpiresIn *int32
	// A token that, if present, can be used to refresh a previously issued access
	// token that might have expired.
	RefreshToken *string
	// An opaque token to access AWS SSO resources assigned to a user.
	AccessToken *string
	// The identifier of the user that associated with the access token, if present.
	IdToken *string
	// Used to notify the client that the returned token is an access token. The
	// supported type is BearerToken.
	TokenType *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type EndpointResolver interface {
	ResolveEndpoint(region string, options ResolverOptions) (aws.Endpoint, error)
}

type EndpointResolverFunc func(region string, options ResolverOptions) (aws.Endpoint, error)

type HTTPClient interface {
	Do(*http.Request) (*http.Response, error)
}

type HTTPSignerV4 interface {
	SignHTTP(ctx context.Context, credentials aws.Credentials, r *http.Request, payloadHash string, service string, region string, signingTime time.Time) error
}

type Options struct {
	// Set of options to modify how an operation is invoked. These apply to all
	// operations invoked for this client. Use functional options on operation call to
	// modify this list for per operation behavior.
	APIOptions []func(*middleware.Stack) error

	// The credentials object to use when signing requests.
	Credentials aws.CredentialsProvider

	// The endpoint options to be used when attempting to resolve an endpoint.
	EndpointOptions ResolverOptions

	// The service endpoint resolver.
	EndpointResolver EndpointResolver

	// Signature Version 4 (SigV4) Signer
	HTTPSignerV4 HTTPSignerV4

	// The region to send requests to. (Required)
	Region string

	// Retryer guides how HTTP requests should be retried in case of recoverable
	// failures. When nil the API client will use a default retryer.
	Retryer retry.Retryer

	// The HTTP client to invoke API calls with. Defaults to client's default HTTP
	// implementation if nil.
	HTTPClient HTTPClient
}

type RegisterClientInput struct {
	// The type of client. The service supports only public as a client type. Anything
	// other than public will be rejected by the service.
	ClientType *string
	// The friendly name of the client.
	ClientName *string
	// The list of scopes that are defined by the client. Upon authorization, this list
	// is used to restrict permissions when granting an access token.
	Scopes []*string
}

type RegisterClientOutput struct {
	// The endpoint where the client can request authorization.
	AuthorizationEndpoint *string
	// A secret string generated for the client. The client will use this string to get
	// authenticated by the service in subsequent calls.
	ClientSecret *string
	// The endpoint where the client can get an access token.
	TokenEndpoint *string
	// The unique identifier string for each client. This client uses this identifier
	// to get authenticated by the service in subsequent calls.
	ClientId *string
	// Indicates the time at which the clientId and clientSecret will become invalid.
	ClientSecretExpiresAt *int64
	// Indicates the time at which the clientId and clientSecret were issued.
	ClientIdIssuedAt *int64

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}

type ResolveEndpoint struct {
	Resolver EndpointResolver
	Options  ResolverOptions
}

type ResolveEndpointMiddlewareOptions interface {
	GetEndpointResolver() EndpointResolver
	GetEndpointOptions() ResolverOptions
}

type ResolverOptions = internalendpoints.Options

type StartDeviceAuthorizationInput struct {
	// A secret string that is generated for the client. This value should come from
	// the persisted result of the RegisterClient () API operation.
	ClientSecret *string
	// The URL for the AWS SSO user portal. For more information, see Using the User
	// Portal
	// (https://docs.aws.amazon.com/singlesignon/latest/userguide/using-the-portal.html)
	// in the AWS Single Sign-On User Guide.
	StartUrl *string
	// The unique identifier string for the client that is registered with AWS SSO.
	// This value should come from the persisted result of the RegisterClient () API
	// operation.
	ClientId *string
}

type StartDeviceAuthorizationOutput struct {
	// The URI of the verification page that takes the userCode to authorize the
	// device.
	VerificationUri *string
	// A one-time user verification code. This is needed to authorize an in-use device.
	UserCode *string
	// Indicates the number of seconds the client must wait between attempts when
	// polling for a session.
	Interval *int32
	// Indicates the number of seconds in which the verification code will become
	// invalid.
	ExpiresIn *int32
	// An alternate URL that the client can use to automatically launch a browser. This
	// process skips the manual step in which the user visits the verification page and
	// enters their code.
	VerificationUriComplete *string
	// The short-lived code that is used by the device when polling for a session
	// token.
	DeviceCode *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
}