@type dpop_policy() :: :bearer | :dpop

@type par_policy() :: :optional | :required

@type registration_policy() :: :disabled | :initial_access_token | :open

@type security_profile() :: :none | :fapi_2_0_security | :fapi_2_0_message_signing

@type t() :: %Lockspire.Domain.ServerPolicy{
  dcr_allowed_grant_types: [String.t()],
  dcr_allowed_redirect_uri_hosts: [String.t()],
  dcr_allowed_redirect_uri_schemes: [String.t()],
  dcr_allowed_response_types: [String.t()],
  dcr_allowed_scopes: [String.t()],
  dcr_allowed_token_endpoint_auth_methods: [String.t()],
  dcr_default_client_lifetime_seconds: non_neg_integer() | nil,
  dcr_default_client_secret_lifetime_seconds: non_neg_integer() | nil,
  dcr_default_registration_access_token_lifetime_seconds:
    non_neg_integer() | nil,
  dpop_policy: dpop_policy(),
  id: integer() | nil,
  inserted_at: DateTime.t() | nil,
  max_delegation_depth: non_neg_integer(),
  par_policy: par_policy(),
  registration_policy: registration_policy(),
  security_profile: security_profile(),
  updated_at: DateTime.t() | nil
}