authz

type Authorization interface {
	Authorize(ctx context.Context, pr PolicyReq, pat *PATReq) error
}

type PATReq struct {
	// PatID contains the personal access token ID.
	PatID string `json:"pat_id"`

	// Domain contains the domain ID.
	Domain string `json:"domain"`

	// Operation contains the operation type for PAT authorization.
	Operation string `json:"operation"`

	// UserID contains the user ID for PAT authorization.
	UserID string `json:"user_id"`

	// EntityID contains the entity ID for PAT authorization.
	EntityID string `json:"entity_id"`

	// EntityType contains the entity type for PAT authorization.
	EntityType string `json:"entity_type"`
}

type PolicyReq struct {
	// Domain contains the domain ID.
	Domain string `json:"domain,omitempty"`

	// Subject contains the subject ID or Token.
	Subject string `json:"subject"`

	// SubjectType contains the subject type. Supported subject types are
	// platform, group, domain, client, users.
	SubjectType string `json:"subject_type"`

	// SubjectKind contains the subject kind. Supported subject kinds are
	// token, users, platform, clients,  channels, groups, domain.
	SubjectKind string `json:"subject_kind"`

	// SubjectRelation contains subject relations.
	SubjectRelation string `json:"subject_relation,omitempty"`

	// Object contains the object ID.
	Object string `json:"object"`

	// ObjectKind contains the object kind. Supported object kinds are
	// users, platform, clients,  channels, groups, domain.
	ObjectKind string `json:"object_kind"`

	// ObjectType contains the object type. Supported object types are
	// platform, group, domain, client, users.
	ObjectType string `json:"object_type"`

	// Relation contains the relation. Supported relations are administrator, editor, contributor, member, guest, parent_group,group,domain.
	Relation string `json:"relation,omitempty"`

	// Permission contains the permission. Supported permissions are admin, delete, edit, share, view,
	// membership, create, admin_only, edit_only, view_only, membership_only, ext_admin, ext_edit, ext_view.
	Permission string `json:"permission,omitempty"`
}