auth

var AdminPathPatterns = []string{
	"/admin",
	"/management",
	"/internal",
	"/api/admin",
	"/api/v*/admin",
	"/debug",
	"/metrics",
	"/actuator",
	"/console",
	"/dashboard",
	"/settings",
	"/config",
	"/system",
}

var AuthMiddlewarePatterns = map[string][]string{

	"gin": {
		"authMiddleware", "AuthMiddleware", "jwt.Auth", "jwt.New",
		"sessions.Sessions", "Auth()", "RequireAuth", "AuthRequired",
		"gin-jwt", "gin-contrib/sessions",
	},
	"echo": {
		"middleware.JWT", "middleware.KeyAuth", "middleware.BasicAuth",
		"echojwt.JWT", "session.Middleware", "Auth()", "AuthMiddleware",
	},
	"chi": {
		"jwtauth", "httpauth", "session", "Auth()", "AuthMiddleware",
	},
	"fiber": {
		"jwtware", "basicauth", "session", "Auth()", "AuthMiddleware",
	},

	"fastapi": {
		"Depends(get_current_user)", "Depends(get_current_active_user)",
		"HTTPBearer", "OAuth2PasswordBearer", "Security(",
		"api_key_header", "get_api_key", "verify_token",
	},
	"flask": {
		"@login_required", "login_required", "@jwt_required",
		"current_user", "flask_login", "flask_jwt", "flask_httpauth",
	},
	"django": {
		"@login_required", "permission_required", "IsAuthenticated",
		"IsAdminUser", "@permission_classes", "authentication_classes",
	},

	"express": {
		"passport.authenticate", "jwt.verify", "express-jwt",
		"isAuthenticated", "requireAuth", "authMiddleware",
	},
	"nestjs": {
		"@UseGuards", "AuthGuard", "JwtAuthGuard", "@ApiBearerAuth",
		"RolesGuard", "@Roles", "PermissionsGuard",
	},
}

var AuthzMiddlewarePatterns = map[string][]string{

	"gin": {
		"rbac", "casbin", "permission", "authorize", "checkRole",
		"RequireRole", "HasPermission", "ACL", "CanAccess",
	},
	"echo": {
		"casbin", "rbac", "authorize", "checkPermission",
	},
	"chi": {
		"casbin", "rbac", "authorize", "permission",
	},
	"fiber": {
		"casbin", "rbac", "authorize", "permission",
	},

	"fastapi": {
		"RoleChecker", "PermissionChecker", "has_permission",
		"check_permission", "require_role", "authorize",
	},
	"flask": {
		"@roles_required", "@permission_required", "has_role",
		"check_permission", "flask_principal",
	},
	"django": {
		"@permission_required", "has_perm", "user_passes_test",
		"PermissionRequiredMixin", "django-guardian",
	},

	"express": {
		"checkRole", "hasPermission", "authorize", "rbac",
		"accessControl", "acl",
	},
	"nestjs": {
		"@Roles", "RolesGuard", "PermissionsGuard", "@SetMetadata",
		"@UseGuards(RolesGuard)", "casl",
	},
}

var MutationMethods = []string{"POST", "PUT", "PATCH", "DELETE"}

var RoutePatterns = map[string]*RouteDetector{
	"gin": {
		ImportPattern:  `"github.com/gin-gonic/gin"`,
		RoutePattern:   `\.(?:GET|POST|PUT|PATCH|DELETE|OPTIONS|HEAD)\s*\(\s*"([^"]+)"`,
		GroupPattern:   `\.Group\s*\(\s*"([^"]+)"`,
		HandlerPattern: `\.(?:GET|POST|PUT|PATCH|DELETE)\s*\([^,]+,\s*(\w+)`,
	},
	"echo": {
		ImportPattern:  `"github.com/labstack/echo`,
		RoutePattern:   `\.(?:GET|POST|PUT|PATCH|DELETE)\s*\(\s*"([^"]+)"`,
		GroupPattern:   `\.Group\s*\(\s*"([^"]+)"`,
		HandlerPattern: `\.(?:GET|POST|PUT|PATCH|DELETE)\s*\([^,]+,\s*(\w+)`,
	},
	"chi": {
		ImportPattern:  `"github.com/go-chi/chi`,
		RoutePattern:   `\.(?:Get|Post|Put|Patch|Delete)\s*\(\s*"([^"]+)"`,
		GroupPattern:   `\.Route\s*\(\s*"([^"]+)"`,
		HandlerPattern: `\.(?:Get|Post|Put|Patch|Delete)\s*\([^,]+,\s*(\w+)`,
	},
	"fiber": {
		ImportPattern:  `"github.com/gofiber/fiber`,
		RoutePattern:   `\.(?:Get|Post|Put|Patch|Delete)\s*\(\s*"([^"]+)"`,
		GroupPattern:   `\.Group\s*\(\s*"([^"]+)"`,
		HandlerPattern: `\.(?:Get|Post|Put|Patch|Delete)\s*\([^,]+,\s*(\w+)`,
	},
	"fastapi": {
		ImportPattern:  `from fastapi|import fastapi`,
		RoutePattern:   `@(?:app|router)\.(?:get|post|put|patch|delete)\s*\(\s*["']([^"']+)["']`,
		GroupPattern:   `APIRouter\s*\(\s*prefix\s*=\s*["']([^"']+)["']`,
		HandlerPattern: `def\s+(\w+)\s*\(`,
	},
	"flask": {
		ImportPattern:  `from flask|import flask`,
		RoutePattern:   `@(?:app|bp)\.route\s*\(\s*["']([^"']+)["']`,
		GroupPattern:   `Blueprint\s*\(\s*\w+\s*,\s*\w+\s*,\s*url_prefix\s*=\s*["']([^"']+)["']`,
		HandlerPattern: `def\s+(\w+)\s*\(`,
	},
	"express": {
		ImportPattern:  `require\s*\(\s*['"]express['"]|from\s+['"]express['"]`,
		RoutePattern:   `\.(?:get|post|put|patch|delete)\s*\(\s*['"]([^'"]+)['"]`,
		GroupPattern:   `Router\s*\(\s*\)`,
		HandlerPattern: `\.(?:get|post|put|patch|delete)\s*\([^,]+,\s*(?:async\s+)?(?:function\s+)?(\w+)?`,
	},
	"nestjs": {
		ImportPattern:  `from\s+['"]@nestjs/`,
		RoutePattern:   `@(?:Get|Post|Put|Patch|Delete)\s*\(\s*['"]?([^'")\s]*)['"]?\s*\)`,
		GroupPattern:   `@Controller\s*\(\s*['"]([^'"]+)['"]`,
		HandlerPattern: `(?:async\s+)?(\w+)\s*\(`,
	},
}

var SensitivePathPatterns = []string{
	"/user",
	"/users",
	"/account",
	"/profile",
	"/password",
	"/auth",
	"/token",
	"/session",
	"/payment",
	"/billing",
	"/order",
	"/cart",
}