auth

type APIKeyHandler struct {
	// contains filtered or unexported fields
}

type APIKeyInfo struct {
	ID          string     `json:"id"`
	UserID      string     `json:"user_id"`
	Name        string     `json:"name"`
	Prefix      string     `json:"prefix"`
	Key         string     `json:"key,omitempty"`
	Scopes      []string   `json:"scopes"`
	CreatedAt   time.Time  `json:"created_at"`
	ExpiresAt   *time.Time `json:"expires_at,omitempty"`
	LastUsed    *time.Time `json:"last_used,omitempty"`
	Revoked     bool       `json:"revoked"`
	RotatedFrom *string    `json:"rotated_from,omitempty"`
	RotatedTo   *string    `json:"rotated_to,omitempty"`
	RotatedAt   *time.Time `json:"rotated_at,omitempty"`
	GracePeriod *time.Time `json:"grace_period,omitempty"`
}

type APIKeyResponseDTO struct {
	ID         string     `json:"id"`
	Name       string     `json:"name"`
	KeyPrefix  string     `json:"key_prefix"`
	Scopes     []string   `json:"scopes"`
	CreatedAt  time.Time  `json:"created_at"`
	ExpiresAt  *time.Time `json:"expires_at,omitempty"`
	LastUsedAt *time.Time `json:"last_used_at,omitempty"`
}

type APIKeyService struct {
	// contains filtered or unexported fields
}

type APIKeyServiceOption func(*APIKeyService)

type AuthMiddleware struct {
	// contains filtered or unexported fields
}

type Claims struct {
	jwt.RegisteredClaims
	UserClaims
	TokenType TokenType `json:"token_type"`
}

type ContextKey string

type CreateKeyRequest struct {
	UserID    string
	Name      string
	Scopes    []string
	ExpiresAt time.Time
}

type CreateKeyRequestDTO struct {
	Name      string   `json:"name" validate:"required"`
	Scopes    []string `json:"scopes" validate:"required"`
	ExpiresIn string   `json:"expires_in,omitempty"` // e.g., "7d", "30d", "90d", "365d", ""
}

type CreateKeyResponseDTO struct {
	APIKey *APIKeyResponseDTO `json:"api_key"`
	Key    string             `json:"key"` // Full key, only shown once
}

type EncryptionConfig struct {
	// Key is the master encryption key (32 bytes for AES-256).
	// Can be set directly or derived from a passphrase.
	Key []byte

	// KeyPath is the path to a file containing the encryption key.
	KeyPath string

	// Passphrase is used to derive the encryption key using PBKDF2.
	Passphrase string

	// Salt is used with the passphrase for key derivation.
	// If not provided, a default salt is used (not recommended for production).
	Salt []byte
}

type Encryptor struct {
	// contains filtered or unexported fields
}

type JWTConfig struct {
	Secret            string        `yaml:"secret"`
	Expiration        time.Duration `yaml:"expiration"`
	RefreshExpiration time.Duration `yaml:"refresh_expiration"`
	Issuer            string        `yaml:"issuer"`
}

type JWTService struct {
	// contains filtered or unexported fields
}

type RotateKeyRequest struct {
	KeyID       string
	UserID      string
	GracePeriod time.Duration
}

type RotateKeyResult struct {
	OldKey *APIKeyInfo `json:"old_key"`
	NewKey *APIKeyInfo `json:"new_key"`
}

type TokenType string

type UserClaims struct {
	UserID   string `json:"user_id"`
	Username string `json:"username"`
	Role     string `json:"role"`
}