/**
 * Query parameters for the OIDC callback endpoint
 *
 * GET /oidc/:provider/callback?code=...&state=...&response_type=json
 */
export default interface CallbackRequest {
    /**
     * Authorization code from the IdP
     * Required for successful authentication
     */
    code?: string;

    /**
     * State parameter for CSRF protection
     * Must match the state stored in the session
     */
    state?: string;

    /**
     * Error code from the IdP (if authorization failed)
     * e.g., "access_denied" if user cancelled
     */
    error?: string;

    /**
     * Human-readable error description from the IdP
     */
    error_description?: string;

    /**
     * Response format for the callback
     * - "json": Return JSON response with user and token
     * - undefined: Redirect to redirectUri with token in URL fragment
     */
    response_type?: "json";

    /**
     * Index signature for Flink Query type compatibility
     */
    [key: string]: string | string[] | undefined;
}