security

type APIKeyRequest struct {
	Name        string    `json:"name" validate:"required,min=1,max=100,no_sql_injection,no_xss"`
	Description string    `json:"description" validate:"max=500,no_xss"`
	ExpiresAt   time.Time `json:"expires_at" validate:"required"`
	Permissions []string  `json:"permissions" validate:"required,dive,oneof=read write admin"`
}

type ActionType string

type AdvancedPattern struct {
	Pattern           *regexp.Regexp
	Severity          string
	Category          string
	Description       string
	Mitigation        string
	FalsePositiveRate float64
	ContextualRules   []ContextualRule
}

type AttackDetector struct {
	// contains filtered or unexported fields
}

type AuditConfig struct {
	Enabled          bool     `json:"enabled"`
	LogLevel         string   `json:"log_level"`
	LogSensitiveData bool     `json:"log_sensitive_data"`
	RetentionDays    int      `json:"retention_days"`
	AuditEvents      []string `json:"audit_events"`
}

type AuditEvent struct {
	EventType string                 `json:"event_type"`
	IPAddress string                 `json:"ip_address,omitempty"`
	UserAgent string                 `json:"user_agent,omitempty"`
	UserID    *string                `json:"user_id,omitempty"`
	Success   bool                   `json:"success"`
	EventData map[string]interface{} `json:"event_data,omitempty"`
}

type AuditLogConfig struct {
	LogPath         string `json:"log_path"`
	EncryptLogs     bool   `json:"encrypt_logs"`
	MaxFileSize     int64  `json:"max_file_size"`
	MaxFiles        int    `json:"max_files"`
	LogLevel        string `json:"log_level"`
	IncludeMetadata bool   `json:"include_metadata"`
}

type AuditLogEntry struct {
	Timestamp   time.Time              `json:"timestamp"`
	Level       string                 `json:"level"`
	EventType   string                 `json:"event_type"`
	UserID      string                 `json:"user_id,omitempty"`
	IPAddress   string                 `json:"ip_address,omitempty"`
	UserAgent   string                 `json:"user_agent,omitempty"`
	Action      string                 `json:"action"`
	Resource    string                 `json:"resource,omitempty"`
	Result      string                 `json:"result"`
	Message     string                 `json:"message"`
	Details     map[string]interface{} `json:"details,omitempty"`
	RequestID   string                 `json:"request_id,omitempty"`
	SessionID   string                 `json:"session_id,omitempty"`
	Fingerprint string                 `json:"fingerprint"`
}

type AuditLogger struct {
	// contains filtered or unexported fields
}

type AuthSecurityConfig struct {
	RequireStrongPasswords bool          `json:"require_strong_passwords"`
	MinPasswordLength      int           `json:"min_password_length"`
	PasswordMinLength      int           `json:"password_min_length"`
	MaxLoginAttempts       int           `json:"max_login_attempts"`
	LockoutDuration        time.Duration `json:"lockout_duration"`
	RequireMFA             bool          `json:"require_mfa"`
	SessionTimeout         time.Duration `json:"session_timeout"`
	PasswordHashAlgorithm  string        `json:"password_hash_algorithm"`
	SaltLength             int           `json:"salt_length"`
	RequireUppercase       bool          `json:"require_uppercase"`
	RequireLowercase       bool          `json:"require_lowercase"`
	RequireNumbers         bool          `json:"require_numbers"`
	RequireSymbols         bool          `json:"require_symbols"`
	PasswordMaxAge         time.Duration `json:"password_max_age"`
	PasswordHistoryCount   int           `json:"password_history_count"`
}

type BehaviorAnalyzer struct {
	// contains filtered or unexported fields
}

type BehaviorProfile struct {
	ClientID        string
	RequestCount    int
	ErrorCount      int
	LastSeen        time.Time
	SuspiciousCount int
	RiskScore       float64
}

type CacheEntry struct {
	Value     interface{}
	ExpiresAt time.Time
	CreatedAt time.Time
}

type CacheKey struct {
	Type      string
	Key       string
	Context   map[string]interface{}
	Timestamp time.Time
}

type ContextualRule struct {
	Condition  string
	Action     string
	Parameters map[string]interface{}
}

type DetectionEvent struct {
	Timestamp   time.Time
	AttackType  string
	Severity    string
	Description string
	ClientID    string
	Blocked     bool
}

type EncryptionConfig struct {
	Algorithm            string        `json:"algorithm"`
	KeySize              int           `json:"key_size"`
	EncryptionKey        string        `json:"encryption_key"`
	RotationInterval     time.Duration `json:"rotation_interval"`
	EncryptSensitiveData bool          `json:"encrypt_sensitive_data"`
	UseArgon2            bool          `json:"use_argon2"`
}

type EncryptionService struct {
	// contains filtered or unexported fields
}

type EndpointLimit struct {
	RequestsPerSecond int           `json:"requests_per_second"`
	BurstSize         int           `json:"burst_size"`
	WindowDuration    time.Duration `json:"window_duration"`
}

type InputValidator struct {
	// contains filtered or unexported fields
}

type JWTSecurityConfig struct {
	SecretKey              string        `json:"secret_key"`
	AccessTokenExpiration  time.Duration `json:"access_token_expiration"`
	RefreshTokenExpiration time.Duration `json:"refresh_token_expiration"`
	Issuer                 string        `json:"issuer"`
	Audience               string        `json:"audience"`
	Algorithm              string        `json:"algorithm"`
	RequireHTTPS           bool          `json:"require_https"`
	TokenRevocationEnabled bool          `json:"token_revocation_enabled"`
}

type PerformanceConfig struct {
	// Cache settings
	PolicyCacheTTL     time.Duration `yaml:"policy_cache_ttl" default:"5m"`
	ValidationCacheTTL time.Duration `yaml:"validation_cache_ttl" default:"1m"`
	RateLimitCacheTTL  time.Duration `yaml:"rate_limit_cache_ttl" default:"30s"`

	// Cache sizes
	PolicyCacheSize     int `yaml:"policy_cache_size" default:"1000"`
	ValidationCacheSize int `yaml:"validation_cache_size" default:"5000"`
	RateLimitCacheSize  int `yaml:"rate_limit_cache_size" default:"10000"`

	// Performance thresholds
	MaxProcessingTime time.Duration `yaml:"max_processing_time" default:"100ms"`
	MaxMemoryUsage    int64         `yaml:"max_memory_usage" default:"104857600"` // 100MB

	// Optimization flags
	EnableCaching     bool `yaml:"enable_caching" default:"true"`
	EnablePooling     bool `yaml:"enable_pooling" default:"true"`
	EnableMetrics     bool `yaml:"enable_metrics" default:"true"`
	EnableCompression bool `yaml:"enable_compression" default:"true"`
}

type PerformanceOptimizer struct {
	// contains filtered or unexported fields
}

type PerformanceResult struct {
	ProcessingTime time.Duration
	CacheHit       bool
	MemoryUsed     int64
	Optimized      bool
	Metrics        map[string]interface{}
}

type PolicyAction struct {
	Type        ActionType             `json:"type"`
	Parameters  map[string]interface{} `json:"parameters"`
	Description string                 `json:"description"`
}

type PolicyContext struct {
	UserID     string                 `json:"user_id"`
	IPAddress  string                 `json:"ip_address"`
	UserAgent  string                 `json:"user_agent"`
	Endpoint   string                 `json:"endpoint"`
	Method     string                 `json:"method"`
	Headers    map[string]string      `json:"headers"`
	Parameters map[string]interface{} `json:"parameters"`
	Body       string                 `json:"body"`
	Timestamp  time.Time              `json:"timestamp"`
	SessionID  string                 `json:"session_id"`
	RequestID  string                 `json:"request_id"`
	Metadata   map[string]interface{} `json:"metadata"`
}

type PolicyEngine struct {
	// contains filtered or unexported fields
}

type PolicyResult struct {
	PolicyID  string                 `json:"policy_id"`
	RuleID    string                 `json:"rule_id"`
	Action    ActionType             `json:"action"`
	Allowed   bool                   `json:"allowed"`
	Message   string                 `json:"message"`
	Details   map[string]interface{} `json:"details"`
	Timestamp time.Time              `json:"timestamp"`
}

type PolicyRule struct {
	ID          string                 `json:"id"`
	Condition   string                 `json:"condition"`
	Field       string                 `json:"field"`
	Operator    RuleOperator           `json:"operator"`
	Value       interface{}            `json:"value"`
	Description string                 `json:"description"`
	Metadata    map[string]interface{} `json:"metadata"`
}

type PolicyType string

type RBACSecurityConfig struct {
	Enabled                    bool     `json:"enabled"`
	DefaultRole                string   `json:"default_role"`
	AdminRoles                 []string `json:"admin_roles"`
	RequireExplicitPermissions bool     `json:"require_explicit_permissions"`
	MaxRoleInheritanceDepth    int      `json:"max_role_inheritance_depth"`
}

type RateLimitSecurityConfig struct {
	GlobalEnabled        bool                     `json:"global_enabled"`
	GlobalRequestsPerSec int                      `json:"global_requests_per_sec"`
	GlobalBurstSize      int                      `json:"global_burst_size"`
	EndpointLimits       map[string]EndpointLimit `json:"endpoint_limits"`
	IPWhitelist          []string                 `json:"ip_whitelist"`
	IPBlacklist          []string                 `json:"ip_blacklist"`
	EnableDDoSProtection bool                     `json:"enable_ddos_protection"`
}

type RequestAnalyzer struct {
	// contains filtered or unexported fields
}

type ResponseFilter struct {
	// contains filtered or unexported fields
}

type ResponseFilterConfig struct {
	Enabled            bool
	RemoveHeaders      []string
	AddSecurityHeaders bool
	SanitizeContent    bool
}

type RuleOperator string

type ScanRequest struct {
	PackageName   string            `json:"package_name" validate:"required,package_name,no_sql_injection,no_xss"`
	Version       string            `json:"version" validate:"omitempty,version"`
	Registry      string            `json:"registry" validate:"required,oneof=npm pypi rubygems maven"`
	RepositoryURL string            `json:"repository_url" validate:"omitempty,url"`
	Timeout       int               `json:"timeout" validate:"min=1,max=3600"`
	Options       map[string]string `json:"options" validate:"dive,no_sql_injection,no_xss"`
}

type SecureConfigValidator struct{}

type SecurityConfig struct {
	JWT               JWTSecurityConfig       `json:"jwt"`
	Authentication    AuthSecurityConfig      `json:"authentication"`
	RateLimit         RateLimitSecurityConfig `json:"rate_limit"`
	RBAC              RBACSecurityConfig      `json:"rbac"`
	Encryption        EncryptionConfig        `json:"encryption"`
	SessionManagement SessionConfig           `json:"session_management"`
	Session           SessionConfig           `json:"session"`
	AuditLogging      AuditConfig             `json:"audit_logging"`
}

type SecurityConnection struct {
	CreatedAt time.Time
	LastUsed  time.Time
	InUse     bool
}

type SecurityPerformanceMetrics struct {
	// Processing time metrics
	PolicyEvaluationCount int64
	PolicyEvaluationTime  time.Duration
	ValidationCount       int64
	ValidationTime        time.Duration
	RateLimitCheckCount   int64
	RateLimitCheckTime    time.Duration
	EncryptionCount       int64
	EncryptionTime        time.Duration

	// Cache metrics
	PolicyCacheHits       int64
	PolicyCacheMisses     int64
	ValidationCacheHits   int64
	ValidationCacheMisses int64

	// Performance metrics
	TotalProcessingTime time.Duration
	MemoryUsed          int64
	ConcurrentRequests  int64

	// Error metrics
	SecurityErrors int64
	TimeoutErrors  int64
	// contains filtered or unexported fields
}

type SecurityPolicy struct {
	ID          string                 `json:"id"`
	Name        string                 `json:"name"`
	Description string                 `json:"description"`
	Type        PolicyType             `json:"type"`
	Enabled     bool                   `json:"enabled"`
	Priority    int                    `json:"priority"`
	Rules       []PolicyRule           `json:"rules"`
	Actions     []PolicyAction         `json:"actions"`
	Metadata    map[string]interface{} `json:"metadata"`
	CreatedAt   time.Time              `json:"created_at"`
	UpdatedAt   time.Time              `json:"updated_at"`
}

type SequenceDetector struct {
	// contains filtered or unexported fields
}

type SessionConfig struct {
	CookieSecure          bool          `json:"cookie_secure"`
	CookieHTTPOnly        bool          `json:"cookie_http_only"`
	CookieSameSite        string        `json:"cookie_same_site"`
	SessionTimeout        time.Duration `json:"session_timeout"`
	IdleTimeout           time.Duration `json:"idle_timeout"`
	MaxConcurrentSessions int           `json:"max_concurrent_sessions"`
}

type UserRequest struct {
	Username string `json:"username" validate:"required,min=3,max=50,alphanum,no_sql_injection"`
	Email    string `json:"email" validate:"required,email"`
	Password string `json:"password" validate:"required,min=8,max=128"`
	Role     string `json:"role" validate:"required,oneof=admin user viewer"`
}

type ValidationError struct {
	Field   string `json:"field"`
	Tag     string `json:"tag"`
	Value   string `json:"value"`
	Message string `json:"message"`
}

type ValidationResult struct {
	Valid  bool              `json:"valid"`
	Errors []ValidationError `json:"errors,omitempty"`
}