jwt

type Claims struct {
	// UserID is the unique identifier of the user (stored in the 'sub' claim)
	UserID string `json:"sub"`

	// Roles contains the user's assigned roles for authorization
	Roles []string `json:"roles"`

	// Scopes contains the user's assigned permission scopes
	Scopes []string `json:"scopes"`

	// Resources contains the resources the user has access to
	Resources []string `json:"resources"`

	// RegisteredClaims contains the standard JWT claims like expiration time
	jwt.RegisteredClaims
}

type Config struct {
	// SecretKey is the key used to sign and verify JWT tokens
	SecretKey string

	// TokenDuration is the validity period for generated tokens
	TokenDuration time.Duration

	// Issuer identifies the entity that issued the token
	Issuer string

	// SigningMethod is the algorithm used to sign JWT tokens
	// Default is HS256 if not specified
	SigningMethod SigningMethod

	// MinSecretKeyLength is the minimum length required for the secret key
	// Default is 32 if not specified
	MinSecretKeyLength int
}

type LocalValidator struct {
	// contains filtered or unexported fields
}

type RemoteClient struct {
	// contains filtered or unexported fields
}

type RemoteConfig struct {
	// ValidationURL is the URL of the remote validation endpoint
	ValidationURL string

	// ClientID is the client ID for the remote validation service
	ClientID string

	// ClientSecret is the client secret for the remote validation service
	ClientSecret string

	// Timeout is the timeout for remote validation operations
	Timeout time.Duration
}

type RemoteValidator struct {
	// contains filtered or unexported fields
}

type Service struct {
	// contains filtered or unexported fields
}

type SigningMethod string

type TokenValidator interface {
	// ValidateToken validates a JWT token and returns the claims if valid.
	ValidateToken(ctx context.Context, tokenString string) (*Claims, error)
}

type ValidationRequest struct {
	Token string `json:"token"`
}

type ValidationResponse struct {
	Valid  bool     `json:"valid"`
	UserID string   `json:"user_id"`
	Roles  []string `json:"roles"`
	Scopes []string `json:"scopes"`
	Error  string   `json:"error,omitempty"`
}