adminidentity

type AddPasskeyCredentialInput struct {
	CredentialID   string
	CredentialJSON string
	PublicKey      string
	Label          string
}

type AddTOTPCredentialInput struct {
	Secret string
	Label  string
}

type Authorizer interface {
	Authorize(context.Context, Principal, string, string) error
}

type ConformanceOptions struct {
	Handler http.Handler
	BaseURL string
	Client  *http.Client
	Routes  []RouteProbe
}

type ConformanceResult struct {
	Pass     bool
	Failures []string
}

type Credential struct {
	ID             string     `json:"id"`
	UserID         string     `json:"user_id,omitempty"`
	Kind           string     `json:"kind"`
	Label          string     `json:"label,omitempty"`
	CreatedAt      time.Time  `json:"created_at,omitempty"`
	LastUsedAt     *time.Time `json:"last_used_at,omitempty"`
	SecretMaterial string     `json:"-"`
}

type CredentialStore interface {
	ListCredentials(context.Context, string) ([]Credential, error)
	AddTOTPCredential(context.Context, string, AddTOTPCredentialInput) (Credential, error)
	AddPasskeyCredential(context.Context, string, AddPasskeyCredentialInput) (Credential, error)
}

type IssueSetupCodeInput struct {
	Email       string    `json:"email"`
	DisplayName string    `json:"display_name,omitempty"`
	Role        string    `json:"role"`
	TenantIDs   []string  `json:"tenant_ids,omitempty"`
	ExpiresAt   time.Time `json:"expires_at,omitempty"`
}

type ListUsersFilter struct {
	Principal Principal
}

type Options struct {
	PagePath          string
	ProfilePath       string
	CredentialsPath   string
	PasskeyBeginPath  string
	PasskeyFinishPath string
	TOTPBeginPath     string
	TOTPVerifyPath    string
	UsersPath         string
	SetupRedeemPath   string
	SetupLoginPath    string
	LogoutPath        string

	PrincipalResolver PrincipalResolver
	UserStore         UserStore
	CredentialStore   CredentialStore
	SetupCodeStore    SetupCodeStore
	SessionIssuer     SessionIssuer
	StepInvoker       StepInvoker
	Authorizer        Authorizer
	LogoutHandler     http.Handler
}

type Principal struct {
	UserID string
	Email  string
	Role   string
}

type PrincipalResolver interface {
	CurrentPrincipal(*http.Request) (Principal, bool)
}

type ProfileUpdater interface {
	UpdateCurrentUser(context.Context, Principal, UpdateProfileInput) (User, error)
}

type RouteProbe struct {
	Name           string
	Method         string
	Path           string
	ExpectedStatus int
	RequireBody    bool
}

type Session struct {
	Token     string    `json:"token"`
	ExpiresAt time.Time `json:"expires_at,omitempty"`
}

type SessionIssuer interface {
	IssueSession(context.Context, SessionRequest) (Session, error)
}

type SessionRequest struct {
	UserID    string
	Email     string
	Role      string
	TenantIDs []string
}

type SetupCode struct {
	ID        string
	Code      string
	Email     string
	UserID    string
	Role      string
	TenantIDs []string
	ExpiresAt time.Time
	UsedAt    *time.Time
}

type SetupCodeStore interface {
	IssueSetupCode(context.Context, IssueSetupCodeInput) (SetupCode, error)
	RedeemSetupCode(context.Context, string, string) (SetupCode, error)
}

type StepCall struct {
	StepType string
	Input    map[string]any
}

type StepInvoker interface {
	InvokeStep(context.Context, StepCall) (map[string]any, error)
}

type UpdateProfileInput struct {
	DisplayName   string `json:"display_name,omitempty"`
	RecoveryEmail string `json:"recovery_email,omitempty"`
}

type User struct {
	ID            string   `json:"id"`
	Email         string   `json:"email"`
	DisplayName   string   `json:"display_name,omitempty"`
	RecoveryEmail string   `json:"recovery_email,omitempty"`
	Role          string   `json:"role,omitempty"`
	TenantIDs     []string `json:"tenant_ids,omitempty"`
}

type UserStore interface {
	CurrentUser(context.Context, Principal) (User, error)
	ListUsers(context.Context, ListUsersFilter) ([]User, error)
}