auth

const (
	ErrUnableToCreateDiscriminator      = "unable to create discriminator"
	ErrUnableToCreateUser               = "unable to create user"
	ErrUnableToGetUserById              = "unable to get user by ID"
	ErrUnableToRemoveRegistration       = "unable to remove registration"
	ErrDiscriminatorIsNotUnique         = "discriminator is not unique"
	ErrTokenIsIncorrect                 = "token is incorrect"
	ErrUnableToGetRegistrationById      = "unable to get registration by id"
	ErrUnableToGetRecoveryByUserId      = "unable to get recovery by user id"
	ErrUnableToCreateRegistration       = "unable to create registration"
	ErrUnableToGetRegistrationByEmail   = "unable to get registration by email"
	ErrUnableToGetPasswordHash          = "unable to get password hash"
	ErrPasswordIsTooShort               = "password is too short"
	ErrUnableToParseBody                = "unable to parse body"
	ErrUnableToCheckIsRefreshToken      = "unable to check is refresh token"
	ErrUnableToGetUserFromToken         = "unable to get user from token"
	ErrUnableToSendEmail                = "unable to send email"
	ErrEmailAlreadySent                 = "email already sent"
	ErrUnableToGenerateToken            = "unable to generate token"
	ErrUnableToGetAuthenticationByEmail = "unable to get authentication by email"
	ErrUnableToSignAuthenticationToken  = "unable to sign authentication token"
	ErrUnableToSignRefreshToken         = "unable to sign refresh token"
	ErrUserIsBanned                     = "user is banned"
	ErrUnableToCompareHash              = "unable to compare hash"
	ErrEmailNotFound                    = "email not found"
	ErrUnableToSetPasswordHash          = "unable to set password hash"
	ErrRecoveryEmailAlreadySent         = "recovery email already sent"
	ErrRecoveryExpired                  = "recovery is expired or invalid"

	// Validation error messages
	ErrNameRequired               = "name is required"
	ErrNameTooShort               = "name must be at least 4 characters"
	ErrNameTooLong                = "name must be less than 20 characters"
	ErrDiscriminatorRequired      = "discriminator is required"
	ErrDiscriminatorTooShort      = "discriminator must be at least 4 characters"
	ErrDiscriminatorTooLong       = "discriminator must be less than 20 characters"
	ErrDiscriminatorInvalidFormat = "discriminator can only contain lowercase letters, numbers, underscore, hyphen, and dot"
	ErrTokenRequired              = "token is required"
	ErrTokenInvalidLength         = "token must be exactly 40 characters"
	ErrIdRequired                 = "id is required"
	ErrIdInvalid                  = "id must be a positive number"
	ErrPasswordTooLong            = "password must be less than 50 characters"
	ErrEmailRequired              = "email is required"
	ErrEmailInvalidFormat         = "email format is invalid"
	ErrPasswordRequired           = "password is required"
)

const (
	ErrUnableToGetAuthenticationByUserId = "unable to get authentication by user id"
	ErrUnableToGetActiveFactor           = "unable to get active factor"
	ErrUnableToGetTOTPFactor             = "unable to get TOTP factor"
	ErrUnableToListRecoveryCodes         = "unable to list recovery codes"
	ErrUnableToReplaceRecoveryCodes      = "unable to replace recovery codes"
	ErrUnableToCreateFactor              = "unable to create factor"
	ErrUnableToDeleteFactor              = "unable to delete factor"
	ErrUnableToPersistSetup              = "unable to persist TOTP setup"
	ErrUnableToLoadSetup                 = "unable to load TOTP setup"
	ErrUnableToDeleteSetup               = "unable to delete TOTP setup"
	ErrUnableToCreateLoginChallenge      = "unable to create login challenge"
	ErrUnableToLoadLoginChallenge        = "unable to load login challenge"
	ErrUnableToDeleteLoginChallenge      = "unable to delete login challenge"
	ErrUnableToValidateSession           = "unable to validate session"
	ErrUnableToEncryptSecret             = "unable to encrypt secret"
	ErrUnableToDecryptSecret             = "unable to decrypt secret"
	ErrUnableToGenerateRecoveryCodes     = "unable to generate recovery codes"
	ErrUnableToGenerateEmailCode         = "unable to generate email code"
	ErrUnableToSendRecoveryCodeEmail     = "unable to send recovery code email"
	ErrUnableToConsumeRecoveryCode       = "unable to consume recovery code"
	ErrUnableToBumpSessionVersion        = "unable to bump session version"
	ErrTwoFactorAlreadyEnabled           = "two-factor auth is already enabled"
	ErrTwoFactorNotEnabled               = "two-factor auth is not enabled"
	ErrSetupExpired                      = "setup is expired or invalid"
	ErrLoginChallengeExpired             = "login challenge is expired or invalid"
	ErrInvalidTwoFactorCode              = "two-factor code is invalid"
	ErrInvalidRecoveryCode               = "recovery code is invalid"
	ErrTooManyAuthAttempts               = "too many authentication attempts"
	ErrTooManyRecoveryEmails             = "too many recovery emails"

	ErrCurrentPasswordRequired = "current password is required"
	ErrNewPasswordRequired     = "new password is required"
	ErrCodeRequired            = "code is required"
	ErrCodeTypeInvalid         = "code type must be totp or recovery_code"
	ErrChallengeIDRequired     = "challenge_id is required"
	ErrSetupIDRequired         = "setup_id is required"
	ErrOTPInvalidFormat        = "OTP must be exactly 6 digits"
)