Tango.AuthorizationVerifier behaviour (tango v0.3.0)

Verifies the identity represented by an ephemeral OAuth credential.

Implementations run on the trusted server. Returned claims must be a small, JSON-compatible map containing only identity fields safe for consumers.

Summary

continuity()

credential()

verification()

@type continuity() :: :initial | {:connection, pos_integer()}

@type credential() :: %{access_token: String.t(), granted_scopes: [String.t()]}

@type verification() :: %{
  subject: String.t(),
  claims: map(),
  continuity: continuity()
}

@callback verify(Tango.Schemas.Provider.t(), credential(), keyword()) ::
  {:ok, verification()} | {:error, atom()}