jwt-verify 0.1.0

use std::fmt::Debug;

use crate::common::error::JwtError;

/// Common trait for JWT verifiers
///
/// This trait defines the common interface that all JWT verifiers must implement.
/// It provides methods for verifying different types of tokens and extracting claims.
///
/// Implementations of this trait include:
/// - `CognitoJwtVerifier` for AWS Cognito tokens
/// - `OidcJwtVerifier` for OIDC-compatible identity providers
pub trait JwtVerifier: Send + Sync + Debug {
    /// Verify a token with generic type support
    ///
    /// This method verifies a JWT token and returns the claims as the specified type.
    ///
    /// # Parameters
    ///
    /// * `token` - The JWT token to verify
    ///
    /// # Returns
    ///
    /// Returns a `Result` containing the verified claims if successful, or a `JwtError`
    /// if verification fails.
    // Note: We can't use a generic method in a trait object, so we'll use specific methods instead
    // async fn verify<T>(&self, token: &str) -> Result<T, JwtError>
    // where
    //     T: DeserializeOwned + Send;

    /// Verify an ID token
    ///
    /// This method verifies an ID token and returns the claims.
    ///
    /// # Parameters
    ///
    /// * `token` - The ID token to verify
    ///
    /// # Returns
    ///
    /// Returns a `Result` containing the verified ID token claims if successful,
    /// or a `JwtError` if verification fails.
    async fn verify_id_token(&self, token: &str) -> Result<Box<dyn IdTokenClaims>, JwtError>;

    /// Verify an access token
    ///
    /// This method verifies an access token and returns the claims.
    ///
    /// # Parameters
    ///
    /// * `token` - The access token to verify
    ///
    /// # Returns
    ///
    /// Returns a `Result` containing the verified access token claims if successful,
    /// or a `JwtError` if verification fails.
    async fn verify_access_token(
        &self,
        token: &str,
    ) -> Result<Box<dyn AccessTokenClaims>, JwtError>;
}

/// Common trait for ID token claims
///
/// This trait defines the common interface for ID token claims across different
/// identity providers.
pub trait IdTokenClaims: Send + Sync + Debug {
    /// Get the subject (user identifier)
    fn get_sub(&self) -> &str;

    /// Get the issuer
    fn get_iss(&self) -> &str;

    /// Get the audience
    fn get_aud(&self) -> &str;

    /// Get the expiration time
    fn get_exp(&self) -> u64;

    /// Get the issued at time
    fn get_iat(&self) -> u64;

    /// Get the user's email if available
    fn get_email(&self) -> Option<&str>;

    /// Check if the user's email is verified
    fn is_email_verified(&self) -> bool;

    /// Get the user's name if available
    fn get_name(&self) -> Option<&str>;
}

/// Common trait for access token claims
///
/// This trait defines the common interface for access token claims across different
/// identity providers.
pub trait AccessTokenClaims: Send + Sync + Debug {
    /// Get the subject (user identifier)
    fn get_sub(&self) -> &str;

    /// Get the issuer
    fn get_iss(&self) -> &str;

    /// Get the audience
    fn get_aud(&self) -> &str;

    /// Get the expiration time
    fn get_exp(&self) -> u64;

    /// Get the issued at time
    fn get_iat(&self) -> u64;

    /// Get the token's scope as a list of individual scopes
    fn get_scopes(&self) -> Vec<String>;

    /// Check if the token has a specific scope
    fn has_scope(&self, scope: &str) -> bool;

    /// Get the client ID if available
    fn get_client_id(&self) -> Option<&str>;
}