-

internal/domain/models.go

@@ -124,11 +124,20 @@ type VerifyResponse struct {
 	Error               string            `json:"error,omitempty"`
 }
 
+// TokenDeliveryMode specifies how tokens should be delivered in redirect flows
+type TokenDeliveryMode string
+
+const (
+	TokenDeliveryCookie TokenDeliveryMode = "cookie"  // Token in secure cookie (default)
+	TokenDeliveryQuery  TokenDeliveryMode = "query"   // Token in query parameter (for integrations)
+)
+
 // LoginRequest represents a user login request
 type LoginRequest struct {
-	AppID       string   `json:"app_id" validate:"required"`
-	Permissions []string `json:"permissions,omitempty"`
-	RedirectURI string   `json:"redirect_uri,omitempty"`
+	AppID         string            `json:"app_id" validate:"required"`
+	Permissions   []string          `json:"permissions,omitempty"`
+	RedirectURI   string            `json:"redirect_uri,omitempty"`
+	TokenDelivery TokenDeliveryMode `json:"token_delivery,omitempty"` // How to deliver token in redirect flows
 }
 
 // LoginResponse represents a user login response