namespace FrameworkDAL.DTO.KeyCloak
{
    // Server-side-only cache payload behind KeyCloakService's one-time login code — the browser
    // never sees the AccessToken, only the random code this is keyed by. See KeyCloakService.cs's
    // UserLoginRedirectCallback (writes this) and AuthenticateUserToken (reads+deletes it, single use).
    public class KeycloakOneTimeLoginDTO
    {
        public string AccessToken { get; set; } = "";
        public string Username { get; set; } = "";
        public string Realm { get; set; } = "";
    }
}