core

type Context struct {
	Request   *http.Request
	Response  http.ResponseWriter
	Loginfy   *Loginfy
	RequestID string // unique identifier for this request
	// contains filtered or unexported fields
}

type Hooks struct {
	OnLogin    func(user *User)
	OnRegister func(user *User)
}

type Loginfy struct {
	// contains filtered or unexported fields
}

type OAuthConfig struct {
	ClientID     string
	ClientSecret string
	RedirectURL  string
	Scopes       []string
}

type OAuthProvider interface {
	Strategy

	// AuthURL returns the URL to redirect the user to for authentication
	AuthURL(state string) string

	// HandleCallback processes the OAuth callback and returns the authenticated user
	HandleCallback(ctx *Context) (*User, error)

	// ProviderName returns the OAuth provider name (e.g., "google", "github")
	ProviderName() string
}

type SessionManager interface {
	CreateSession(userId string) (string, error)
	ValidateSession(ctx *Context, token string) (string, error)
	DestroySession(ctx *Context, token string) error
}

type Storage interface {
	CreateUser(user *User) error
	GetUserByEmail(email string) (*User, error)
	GetUserById(id string) (*User, error)
	UpdateUser(user *User) error
	DeleteUser(id string) error
}

type Strategy interface {
	Name() string
	Authenticate(ctx *Context) (*User, error)
}

type User struct {
	ID        string                 `json:"id" bson:"_id,omitempty"`
	Email     string                 `json:"email" bson:"email"`
	Password  string                 `json:"-" bson:"password"` // Never serialize password in JSON
	Roles     []string               `json:"roles" bson:"roles"`
	Metadata  map[string]interface{} `json:"metadata,omitempty" bson:"metadata,omitempty"`
	CreatedAt time.Time              `json:"created_at" bson:"created_at"`
	UpdatedAt time.Time              `json:"updated_at" bson:"updated_at"`
}