wwwauthenticate

type BearerError struct {
	// Error provides the client with the reason why the access request was declined.
	Reason BearerErrorType

	// ErrorURI attribute is an absolute URI identifying a human-readable web page
	// explaining the error.
	ErrorURI *string

	// ErrorDescription attribute provides developers with a human-readable
	// explanation of the error that is not meant to be displayed to end-users.
	ErrorDescription *string

	// Realm  attribute MAY be included to indicate the scope of
	// protection in the manner described in HTTP/1.1 [RFC2617].  The
	// "realm" attribute MUST NOT appear more than once.
	//
	// [RFC2617]: https://datatracker.ietf.org/doc/html/rfc2617
	Realm *string

	// Scope attribute is defined in Section 3.3 of [RFC6749]. The
	// "scope" attribute is a space-delimited list of case-sensitive scope
	// values indicating the required scope of the access token for
	// accessing the requested resource. "scope" values are implementation
	// defined; there is no centralized registry for them; allowed values
	// are defined by the authorization server.  The order of "scope" values
	// is not significant.  In some cases, the "scope" value will be used
	// when requesting a new access token with sufficient scope of access to
	// utilize the protected resource.  Use of the "scope" attribute is
	// OPTIONAL.  The "scope" attribute MUST NOT appear more than once.  The
	// "scope" value is intended for programmatic use and is not meant to be
	// displayed to end-users.
	//
	// If the protected resource request included an access token and failed
	// authentication, the resource server SHOULD include the "error"
	// attribute to provide the client with the reason why the access
	// request was declined.  The parameter value is described in
	// Section 3.1.  In addition, the resource server MAY include the
	// "error_description" attribute to provide developers a human-readable
	// explanation that is not meant to be displayed to end-users.  It also
	// MAY include the "error_uri" attribute with an absolute URI
	// identifying a human-readable web page explaining the error.  The
	// "error", "error_description", and "error_uri" attributes MUST NOT
	// appear more than once.
	//
	// Values for the "scope" attribute (specified in Appendix A.4 of
	// [RFC6749]) MUST NOT include characters outside the set %x21 / %x23-5B
	// / %x5D-7E for representing scope values and %x20 for delimiters
	// between scope values.  Values for the "error" and "error_description"
	// attributes (specified in Appendixes A.7 and A.8 of [RFC6749]) MUST
	// NOT include characters outside the set %x20-21 / %x23-5B / %x5D-7E.
	// Values for the "error_uri" attribute (specified in Appendix A.9 of
	// [RFC6749]) MUST conform to the URI-reference syntax and thus MUST NOT
	// include characters outside the set %x21 / %x23-5B / %x5D-7E.
	//
	// [RFC6749]: https://datatracker.ietf.org/doc/html/rfc6749
	Scope []string

	// ACRValues is a space-separated string listing the authentication context class reference
	// values in order of preference. The protected resource requires one of these
	// values for the authentication event associated with the access token. As defined
	// in Section 1.2 of [OIDC], the authentication context conveys information about
	// how authentication takes place (e.g., what authentication method(s) or assurance
	// level to meet).
	//
	// [OIDC]: https://openid.net/specs/openid-connect-core-1_0.html
	ACRValues *string

	// MaxAge value indicates the allowable elapsed time since the last active
	// authentication event associated with the access token. An active authentication
	// event entails a user interacting with the authorization server in response to an
	// authentication prompt. Note that, while the auth-param value can be conveyed as
	// a token or quoted-string (see Section 11.2 of [RFC9110]), it has to represent a
	// non-negative integer.
	//
	// [RFC9110]: https://www.rfc-editor.org/info/rfc9110
	MaxAge *time.Duration

	// AuthorizationDetails specifies the authorization requirements for a certain type of resource.
	// The type of resource or access requirement is determined by the type field of
	// the [rar.AuthorizationDetail].
	//
	// [RFC9396]: https://datatracker.ietf.org/doc/html/rfc9396
	AuthorizationDetails []rar.AuthorizationDetail
}

type BearerErrorType string

type Challenge struct {
	Scheme string
	Fields map[string]string
}

type Challenges []error

type StringEncoder interface {
	// contains filtered or unexported methods
}