models

type AuditLog struct {
	ID                uuid.UUID    `db:"id" json:"id"`
	Type              AuditLogType `db:"type" json:"type"`
	Error             *string      `db:"error" json:"error,omitempty"`
	MetaHttpRequestId string       `db:"meta_http_request_id" json:"meta_http_request_id"`
	MetaSourceIp      string       `db:"meta_source_ip" json:"meta_source_ip"`
	MetaUserAgent     string       `db:"meta_user_agent" json:"meta_user_agent"`
	ActorUserId       *uuid.UUID   `db:"actor_user_id" json:"actor_user_id,omitempty"`
	ActorEmail        *string      `db:"actor_email" json:"actor_email,omitempty" mask:"email"`
	Details           slices.Map   `db:"details" json:"details"`
	CreatedAt         time.Time    `db:"created_at" json:"created_at"`
	UpdatedAt         time.Time    `db:"updated_at" json:"updated_at"`
}

type AuditLogType string

type Details map[string]interface{}

type Email struct {
	ID           uuid.UUID     `db:"id" json:"id"`
	UserID       *uuid.UUID    `db:"user_id" json:"user_id,omitempty"` // TODO: should not be a pointer anymore
	Address      string        `db:"address" json:"address"`
	Verified     bool          `db:"verified" json:"verified"`
	PrimaryEmail *PrimaryEmail `has_one:"primary_emails" json:"primary_emails,omitempty"`
	User         *User         `belongs_to:"user" json:"user,omitempty"`
	Identities   Identities    `has_many:"identities" json:"identity,omitempty"`
	CreatedAt    time.Time     `db:"created_at" json:"created_at"`
	UpdatedAt    time.Time     `db:"updated_at" json:"updated_at"`
}

type Emails []Email

type Flow struct {
	ID        uuid.UUID `json:"id" db:"id"`
	Data      string    `json:"data" db:"data"`
	Version   int       `json:"version" db:"version"`
	CSRFToken string    `json:"csrf_token" db:"csrf_token"`
	ExpiresAt time.Time `json:"expires_at" db:"expires_at"`
	UpdatedAt time.Time `json:"updated_at" db:"updated_at"`
	CreatedAt time.Time `json:"created_at" db:"created_at"`
}

type Flows []Flow

type Identities []Identity

type Identity struct {
	ID             uuid.UUID     `json:"id" db:"id"`
	ProviderUserID string        `json:"provider_user_id" db:"provider_user_id"`
	ProviderID     string        `json:"provider_id" db:"provider_id"`
	Data           slices.Map    `json:"data" db:"data"`
	EmailID        uuid.UUID     `json:"email_id" db:"email_id"`
	Email          *Email        `json:"email,omitempty" belongs_to:"email"`
	CreatedAt      time.Time     `json:"created_at" db:"created_at"`
	UpdatedAt      time.Time     `json:"updated_at" db:"updated_at"`
	SamlIdentity   *SamlIdentity `json:"saml_identity" has_one:"saml_identity"`
}

type Jwk struct {
	ID        int       `db:"id"`
	KeyData   string    `db:"key_data"`
	CreatedAt time.Time `db:"created_at"`
}

type OTPSecret struct {
	ID        uuid.UUID `db:"id"`
	UserID    uuid.UUID `db:"user_id"`
	Secret    string    `db:"secret"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
}

type Operation string

type Passcode struct {
	ID        uuid.UUID  `db:"id"`
	UserId    *uuid.UUID `db:"user_id"`
	EmailID   *uuid.UUID `db:"email_id"`
	Ttl       int        `db:"ttl"` // in seconds
	Code      string     `db:"code"`
	TryCount  int        `db:"try_count"`
	CreatedAt time.Time  `db:"created_at"`
	UpdatedAt time.Time  `db:"updated_at"`
	Email     Email      `belongs_to:"email"`
}

type PasswordCredential struct {
	ID        uuid.UUID `db:"id"`
	UserId    uuid.UUID `db:"user_id"`
	Password  string    `db:"password"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
}

type PrimaryEmail struct {
	ID        uuid.UUID `db:"id" json:"id"`
	EmailID   uuid.UUID `db:"email_id" json:"email_id"`
	UserID    uuid.UUID `db:"user_id" json:"-"`
	Email     *Email    `belongs_to:"email" json:"email"`
	User      *User     `belongs_to:"user" json:"-"`
	CreatedAt time.Time `db:"created_at" json:"-"`
	UpdatedAt time.Time `db:"updated_at" json:"-"`
}

type RequestMeta struct {
	HttpRequestId string
	SourceIp      string
	UserAgent     string
}

type SamlCertificate struct {
	ID            uuid.UUID `json:"id" db:"id"`
	CertData      string    `json:"cert_data" db:"cert_data"`
	CertKey       string    `json:"cert_key" db:"cert_key"`
	EncryptionKey string    `json:"encryption_key" db:"encryption_key"`
	CreatedAt     time.Time `json:"created_at" db:"created_at"`
	UpdatedAt     time.Time `json:"updated_at" db:"updated_at"`
}

type SamlIDPInitiatedRequest struct {
	ID         uuid.UUID `db:"id"`
	ResponseID string    `db:"response_id"`
	Issuer     string    `db:"issuer"`
	ExpiresAt  time.Time `db:"expires_at"`
	CreatedAt  time.Time `db:"created_at"`
}

type SamlIdentities []SamlIdentity

type SamlIdentity struct {
	ID         uuid.UUID `json:"id" db:"id"`
	IdentityID uuid.UUID `json:"identity_id" db:"identity_id"`
	Domain     string    `json:"domain" db:"domain"`
	CreatedAt  time.Time `json:"created_at" db:"created_at"`
	UpdatedAt  time.Time `json:"updated_at" db:"updated_at"`
}

type SamlState struct {
	ID        uuid.UUID `db:"id"`
	Nonce     string    `db:"nonce"`
	State     string    `db:"state"`
	ExpiresAt time.Time `db:"expires_at"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
}

type Session struct {
	ID        uuid.UUID    `db:"id" json:"id"`
	UserID    uuid.UUID    `db:"user_id" json:"user_id"`
	UserAgent nulls.String `db:"user_agent" json:"user_agent"`
	IpAddress nulls.String `db:"ip_address" json:"ip_address"`
	CreatedAt time.Time    `db:"created_at" json:"created_at"`
	UpdatedAt time.Time    `db:"updated_at" json:"updated_at"`
	ExpiresAt *time.Time   `db:"expires_at" json:"expires_at"`
	LastUsed  time.Time    `db:"last_used" json:"last_used"`
}

type Token struct {
	ID          uuid.UUID  `db:"id"`
	UserID      uuid.UUID  `db:"user_id"`
	IdentityID  *uuid.UUID `db:"identity_id"`
	IsFlow      bool       `db:"is_flow"`
	Value       string     `db:"value"`
	UserCreated bool       `db:"user_created"`
	ExpiresAt   time.Time  `db:"expires_at"`
	CreatedAt   time.Time  `db:"created_at"`
	UpdatedAt   time.Time  `db:"updated_at"`
}

type Transports []WebauthnCredentialTransport

type TrustedDevice struct {
	ID          uuid.UUID `db:"id"`
	UserID      uuid.UUID `db:"user_id"`
	DeviceToken string    `db:"device_token"`
	ExpiresAt   time.Time `db:"expires_at"`
	CreatedAt   time.Time `db:"created_at"`
	UpdatedAt   time.Time `db:"updated_at"`
}

type User struct {
	ID                  uuid.UUID           `db:"id" json:"id"`
	WebauthnCredentials WebauthnCredentials `has_many:"webauthn_credentials" json:"webauthn_credentials,omitempty"`
	Emails              Emails              `has_many:"emails" json:"-"`
	CreatedAt           time.Time           `db:"created_at" json:"created_at"`
	UpdatedAt           time.Time           `db:"updated_at" json:"updated_at"`
	Username            *Username           `has_one:"username" json:"username,omitempty"`
	OTPSecret           *OTPSecret          `has_one:"otp_secret" json:"-"`
	PasswordCredential  *PasswordCredential `has_one:"password_credentials" json:"-"`
	Metadata            *UserMetadata       `has_one:"user_metadata" json:"-"`
}

type UserMetadata struct {
	ID        uuid.UUID    `db:"id"`
	UserID    uuid.UUID    `db:"user_id"`
	Public    nulls.String `db:"public_metadata"`
	Private   nulls.String `db:"private_metadata"`
	Unsafe    nulls.String `db:"unsafe_metadata"`
	CreatedAt time.Time    `db:"created_at"`
	UpdatedAt time.Time    `db:"updated_at"`
}

type Username struct {
	ID        uuid.UUID `db:"id"`
	UserId    uuid.UUID `db:"user_id"`
	Username  string    `db:"username"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
}

type WebauthnCredential struct {
	ID              string                        `db:"id" json:"id"`
	Name            *string                       `db:"name" json:"name"`
	UserId          uuid.UUID                     `db:"user_id" json:"user_id"`
	PublicKey       string                        `db:"public_key" json:"public_key"`
	AttestationType string                        `db:"attestation_type" json:"attestation_type"`
	AAGUID          uuid.UUID                     `db:"aaguid" json:"aaguid"`
	SignCount       int                           `db:"sign_count" json:"sign_count"`
	LastUsedAt      *time.Time                    `db:"last_used_at" json:"last_used_at"`
	CreatedAt       time.Time                     `db:"created_at" json:"created_at"`
	UpdatedAt       time.Time                     `db:"updated_at" json:"updated_at"`
	Transports      Transports                    `has_many:"webauthn_credential_transports" json:"transports"`
	BackupEligible  bool                          `db:"backup_eligible" json:"backup_eligible"`
	BackupState     bool                          `db:"backup_state" json:"backup_state"`
	MFAOnly         bool                          `db:"mfa_only" json:"mfa_only"`
	UserHandleID    *uuid.UUID                    `db:"user_handle_id" json:"-"`
	UserHandle      *WebauthnCredentialUserHandle `belongs_to:"webauthn_credential_user_handle" fk_id:"webauthn_credential_user_handle_fkey" json:"user_handle,omitempty"`
}

type WebauthnCredentialTransport struct {
	ID                   uuid.UUID           `db:"id"`
	Name                 string              `db:"name"`
	WebauthnCredentialID string              `db:"webauthn_credential_id"`
	WebauthnCredential   *WebauthnCredential `belongs_to:"webauthn_credential"`
}

type WebauthnCredentialUserHandle struct {
	ID        uuid.UUID `db:"id" json:"id"`
	UserID    uuid.UUID `db:"user_id" json:"user_id"`
	Handle    string    `db:"handle" json:"handle"`
	CreatedAt time.Time `db:"created_at" json:"created_at"`
	UpdatedAt time.Time `db:"updated_at" json:"updated_at"`
}

type WebauthnCredentials []WebauthnCredential

type WebauthnSessionData struct {
	ID                 uuid.UUID                              `db:"id"`
	Challenge          string                                 `db:"challenge"`
	UserId             uuid.UUID                              `db:"user_id"`
	UserVerification   string                                 `db:"user_verification"`
	CreatedAt          time.Time                              `db:"created_at"`
	UpdatedAt          time.Time                              `db:"updated_at"`
	Operation          Operation                              `db:"operation"`
	AllowedCredentials []WebauthnSessionDataAllowedCredential `has_many:"webauthn_session_data_allowed_credentials"`
	ExpiresAt          nulls.Time                             `db:"expires_at"`
}

type WebauthnSessionDataAllowedCredential struct {
	ID                    uuid.UUID            `db:"id"`
	CredentialId          string               `db:"credential_id"`
	WebauthnSessionDataID uuid.UUID            `db:"webauthn_session_data_id"`
	CreatedAt             time.Time            `db:"created_at"`
	UpdatedAt             time.Time            `db:"updated_at"`
	WebauthnSessionData   *WebauthnSessionData `belongs_to:"webauthn_session_data"`
}

type Webhook struct {
	ID            uuid.UUID     `json:"id" db:"id"`
	Callback      string        `json:"callback" db:"callback"`
	Enabled       bool          `json:"enabled" db:"enabled"`
	Failures      int           `json:"failures" db:"failures"`
	ExpiresAt     time.Time     `json:"expires_at" db:"expires_at"`
	WebhookEvents WebhookEvents `json:"events" has_many:"webhook_events"`
	CreatedAt     time.Time     `json:"created_at" db:"created_at"`
	UpdatedAt     time.Time     `json:"updated_at" db:"updated_at"`
}

type WebhookEvent struct {
	ID        uuid.UUID `json:"id" db:"id"`
	Webhook   *Webhook  `json:"-" belongs_to:"webhook"`
	WebhookID uuid.UUID `json:"-" db:"webhook_id"`
	Event     string    `json:"event" db:"event"`
	CreatedAt time.Time `json:"-" db:"created_at"`
	UpdatedAt time.Time `json:"-" db:"updated_at"`
}

type WebhookEvents []WebhookEvent

type Webhooks []Webhook