auth

type ApiTokenAuthnHandlerSpec struct {
	TokenLookup TokenLookup
	UserGetter  UserGetter
}

type AuthMethod string

type AuthenticationToken string

type AuthnMiddleware interface {
	AuthenticateUser(next http.Handler) http.Handler
	GetAvailableAuthenticators() []authenticator
}

type Claims struct {
	UserID string `json:"userId"`
	Role   string `json:"role"`
	jwt.StandardClaims
}

type ContextUser string

type GitHubOAuthHandlerSpec struct {
	ClientID          string
	ClientSecret      string
	RedirectURI       string
	OAuthUserService  oAuthUserService
	OAuthStateStore   stores.OAuthStateStore
	RefreshTokenStore stores.RefreshTokenStore
	JWTSecret         []byte
	JWTClaimsBuilder  JWTClaimsBuilder
	OrgInviteService  oAuthInviteService
	EncryptionService oAuthEncryptionService
	Logger            logger.Logger
}

type Identity struct {
	UserID      string
	OrgID       string
	Role        string
	AuthMethod  AuthMethod
	TokenID     string
	TokenScopes []string
	ResourceIDs []string
	IsSystem    bool
	// ContactEmail carries the operator contact for system identities,
	// which have no backing user.
	ContactEmail string
}

type IdentityKey string

type JWTAuthnHandlerSpec struct {
	JWTSecret  []byte
	UserGetter UserGetter
}

type JWTClaimsBuilder interface {
	BuildClaims(user *models.User, expirationTime time.Time) jwt.Claims
}

type JWTClaimsBuilderImpl struct{}

type JWTCookieAuthnHandlerSpec struct {
	JWTSecret  []byte
	UserGetter UserGetter
}

type JwtAuthPayload struct {
	UserID string `json:"userId"`
	Role   string `json:"role"`
}

type MockAuthnMiddleware struct {
	// contains filtered or unexported fields
}

type MockAuthnMiddlewareMockRecorder struct {
	// contains filtered or unexported fields
}

type MockTokenLookup struct {
	// contains filtered or unexported fields
}

type MockTokenLookupMockRecorder struct {
	// contains filtered or unexported fields
}

type MockUserGetter struct {
	// contains filtered or unexported fields
}

type MockUserGetterMockRecorder struct {
	// contains filtered or unexported fields
}

type Mockauthenticator struct {
	// contains filtered or unexported fields
}

type MockauthenticatorMockRecorder struct {
	// contains filtered or unexported fields
}

type PermissionService interface {
	Check(ctx context.Context, domain, resource, resourceID, action string) *errors.ServiceError
}

type PermissionServiceSpec struct {
	PolicyManager resourceaccess.ResourceAccessPolicyManager
	ProjectStore  stores.ProjectStore
	Logger        logger.Logger
}

type RefreshHandlerSpec struct {
	RefreshTokenStore stores.RefreshTokenStore
	UserGetter        UserGetter
	JWTSecret         []byte
	JWTClaimsBuilder  JWTClaimsBuilder
}

type ResourceType struct {
	Name    string
	Parent  string // Optional parent resource for hierarchical permissions (e.g. "addons" is parent of "addons/postgres")
	Actions []string
}

type TokenLookup interface {
	ValidateToken(ctx context.Context, rawToken string) (*models.APIToken, *errors.ServiceError)
}

type UserGetter interface {
	InternalGet(ctx context.Context, ID string) (*models.User, *errors.ServiceError)
}