Prototype device authorization flow (core)

pkg/identity/oidc/device_auth.go

@@ -0,0 +1,55 @@
+package oidc
+
+import (
+	"time"
+
+	"golang.org/x/oauth2"
+)
+
+type UserDeviceAuthResponse struct {
+	// UserCode is the code the user should enter at the verification uri
+	UserCode string `json:"user_code"`
+	// VerificationURI is where user should enter the user code
+	VerificationURI string `json:"verification_uri"`
+	// VerificationURIComplete (if populated) includes the user code in the verification URI. This is typically shown to the user in non-textual form, such as a QR code.
+	VerificationURIComplete string `json:"verification_uri_complete,omitempty"`
+
+	// InitialRetryDelay is the duration in seconds the client must wait before
+	// attempting to retry the request, after completing their sign-in.
+	// This gives the server time to poll the identity provider for the results.
+	InitialRetryDelay int64 `json:"initial_retry_delay,omitempty"`
+
+	// RetryToken should be sent on subsequent retries of the original request.
+	RetryToken []byte `json:"retry_token,omitempty"`
+}
+
+type RetryToken struct {
+	DeviceCode string `json:"device_code"`
+	NotBefore  int64  `json:"not_before"`
+	NotAfter   int64  `json:"not_after"`
+}
+
+func (rt RetryToken) AsDeviceAuthResponse() *oauth2.DeviceAuthResponse {
+	return &oauth2.DeviceAuthResponse{
+		DeviceCode: rt.DeviceCode,
+		Expiry:     time.Unix(0, rt.NotAfter),
+	}
+}
+
+func NewRetryToken(authResp *oauth2.DeviceAuthResponse) RetryToken {
+	return RetryToken{
+		DeviceCode: authResp.DeviceCode,
+		NotBefore:  time.Now().Add(time.Duration(authResp.Interval) * time.Second).UnixNano(),
+		NotAfter:   authResp.Expiry.UnixNano(),
+	}
+}
+
+func NewUserDeviceAuthResponse(authResp *oauth2.DeviceAuthResponse, retryTokenCiphertext []byte) UserDeviceAuthResponse {
+	return UserDeviceAuthResponse{
+		UserCode:                authResp.UserCode,
+		VerificationURI:         authResp.VerificationURI,
+		VerificationURIComplete: authResp.VerificationURIComplete,
+		InitialRetryDelay:       authResp.Interval,
+		RetryToken:              retryTokenCiphertext,
+	}
+}