syntax = "proto3";

package oidc.v1;

enum FlowKind {
  FLOW_KIND_UNSPECIFIED = 0;
  FLOW_KIND_LOGIN = 1;
  FLOW_KIND_REGISTRATION = 2;
  FLOW_KIND_SETTINGS = 3;
}

message State {
  bytes flow_id = 1;
  bytes session_token_exchange_code_sha512 = 2;
  string provider_id = 3;
  string pkce_verifier = 4;
  FlowKind flow_kind = 5;
  // request_base_url is the scheme://host[:port] the browser used at flow
  // init. It is captured so the OIDC/SAML callback can be redirected back
  // onto the developer proxy / custom domain the user started on. Empty
  // when there is nothing to rewrite.
  string request_base_url = 6;
}