package idp

import (
	"context"
	"fmt"
)

func (p *IDP) CodeEpoch(ctx context.Context, code string) (string, int64, string, error) {
	c, err := p.dex.GetAuthCode(ctx, code)
	if err != nil {
		return "", 0, "", fmt.Errorf("idp: read the authorization code: %w", err)
	}
	if c.ConnectorID != ConnectorID {
		return "", 0, "", ErrWrongConnector
	}
	userID, epoch, browser, err := parseGrant(c.ConnectorData)
	if err != nil || userID != c.Claims.UserID {
		return "", 0, "", ErrGrantMalformed
	}
	return userID, epoch, browser, nil
}