types

type AuthMiddleware interface {
	MiddlewareFunc() gin.HandlerFunc
	LoginHandler() gin.HandlerFunc
	LogoutHandler() gin.HandlerFunc
	RefreshHandler() gin.HandlerFunc
}

type AuthOptions struct {
	// JWT Configuration
	JWTSecret         string
	JWTRealm          string
	TokenExpireTime   time.Duration
	RefreshExpireTime time.Duration
	IdentityKey       string

	// Session Configuration
	SessionSecret   string
	SessionMaxAge   int
	SessionDomain   string
	SessionSecure   bool
	SessionSameSite string

	// OAuth Configuration
	OAuth *OAuthConfig

	// Callback Functions
	FindUserByEmail FindUserByEmailFunc
	FindUserByID    FindUserByIDFunc
}

type BFFAuthOptions struct {
	// Session configuration
	SessionSecret string
	SessionMaxAge int
	SessionDomain string
	SessionSecure bool

	// JWT configuration
	JWTSecret string
	JWTExpiry time.Duration

	// Cookie configuration
	SIDCookieName string
	SIDCookiePath string

	// Session service (provided by implementing project)
	SessionService SessionService

	// User callbacks
	FindUserByEmail FindUserByEmailFunc
	FindUserByID    FindUserByIDFunc

	// OAuth configuration (optional)
	OAuth *OAuthConfig
}

type FindUserByEmailFunc func(email string) (UserInfo, error)

type FindUserByIDFunc func(id uint) (UserInfo, error)

type OAuthConfig struct {
	Providers  map[string]OAuthProvider `json:"providers"`
	BaseURL    string                   `json:"base_url"`
	SuccessURL string                   `json:"success_url"`
	FailureURL string                   `json:"failure_url"`

	// User management callbacks
	FindUserByEmail FindUserByEmailFunc `json:"-"`
	FindUserByID    FindUserByIDFunc    `json:"-"`

	// Error handling configuration
	FailOnProviderError bool `json:"fail_on_provider_error"` // If true, service fails fast when providers fail to initialize

	// User configuration
	DefaultRole string `json:"default_role"`
}

type OAuthProvider struct {
	ClientID     string   `json:"client_id"`
	ClientSecret string   `json:"client_secret"`
	RedirectURL  string   `json:"redirect_url"`
	Scopes       []string `json:"scopes"`
}

type SessionService interface {
	CreateSession(user UserInfo, expiry time.Duration) (string, error)
	GetSession(sid string) (UserInfo, error)
	DeleteSession(sid string) error
	ValidateSession(sid string) (UserInfo, error)
}

type UserInfo struct {
	ID           uint           `json:"id"`
	Email        string         `json:"email"`
	Role         string         `json:"role"`
	FirstName    string         `json:"first_name,omitempty"`
	LastName     string         `json:"last_name,omitempty"`
	PasswordHash string         `json:"-"`                       // Never expose password hash in JSON
	CustomFields map[string]any `json:"custom_fields,omitempty"` // Extensible fields for implementers
}