/**
 * Query parameters for OAuth callback request
 *
 * Note: All query parameters are normalized to strings or string arrays by Flink.
 * Providers may send additional query parameters beyond those listed here.
 */
type CallbackRequest = Record<string, string | string[]> & {
    /**
     * Authorization code from OAuth provider
     */
    code?: string;

    /**
     * CSRF protection state parameter
     */
    state?: string;

    /**
     * Optional error from OAuth provider
     * Common values: access_denied, invalid_request, unauthorized_client, etc.
     */
    error?: string;

    /**
     * Human-readable error description (OAuth 2.0 standard)
     */
    error_description?: string;

    /**
     * URI with error information (OAuth 2.0 standard)
     */
    error_uri?: string;

    /**
     * Response type - 'json' returns JSON instead of redirect
     */
    response_type?: "json" | string;

    /**
     * Granted scopes (provider-specific)
     * May be sent by GitHub, Google, and other providers
     */
    scope?: string;

    /**
     * Google-specific: Index of the account selected by the user
     */
    authuser?: string;

    /**
     * Google-specific: Indicates which prompt was shown to the user
     * Values: none, consent, select_account
     */
    prompt?: string;

    /**
     * Google-specific: Hosted domain of the user
     */
    hd?: string;

    /**
     * Session state or other provider-specific parameters
     */
    session_state?: string;
};

export default CallbackRequest;