security

type AdvancedRecoveryMiddleware struct {
	// contains filtered or unexported fields
}

type AuditEvent struct {
	Timestamp time.Time     `json:"timestamp"`
	EventType EventType     `json:"event_type"`
	Severity  Severity      `json:"severity"`
	UserID    string        `json:"user_id,omitempty"`
	IPAddress string        `json:"ip_address"`
	Resource  string        `json:"resource"`
	Action    string        `json:"action"`
	Status    string        `json:"status"`
	Message   string        `json:"message"`
	Duration  time.Duration `json:"duration,omitempty"`
}

type AuditLogger struct {
	// contains filtered or unexported fields
}

type CSRFConfig struct {
	// TokenLength is the length of the CSRF token in bytes
	TokenLength int
	// CookieName is the name of the CSRF cookie
	CookieName string
	// CookieMaxAge is the max age of the cookie in seconds
	CookieMaxAge int
	// CookieSameSite sets the SameSite attribute
	CookieSameSite http.SameSite
	// CookieSecure ensures cookies are only sent over HTTPS
	CookieSecure bool
	// CookieHTTPOnly makes the cookie inaccessible to JavaScript
	CookieHTTPOnly bool
	// HeaderName is the header that contains the CSRF token
	HeaderName string
	// FormFieldName is the form field name for the CSRF token
	FormFieldName string
}

type CSRFMiddleware struct {
	// contains filtered or unexported fields
}

type EventType string

type PanicRecoveryMiddleware struct {
	// contains filtered or unexported fields
}

type RecoveryConfig struct {
	// LogPanics logs panic details
	LogPanics bool
	// StackTrace enables stack trace logging
	StackTrace bool
	// CustomHandler allows custom panic response
	CustomHandler func(w http.ResponseWriter, r *http.Request, panicValue interface{})
}

type RecoveryOptions struct {
	// EnableStackTrace includes stack traces in logs
	EnableStackTrace bool
	// LogLevel controls the log level for recovered panics
	LogLevel slog.Level
}

type SecurityHeadersConfig struct {
	// ContentSecurityPolicy sets CSP header
	ContentSecurityPolicy string
	// XFrameOptions sets X-Frame-Options header
	XFrameOptions string
	// XContentTypeOptions sets X-Content-Type-Options header
	XContentTypeOptions string
	// XXSSProtection sets X-XSS-Protection header
	XXSSProtection string
	// ReferrerPolicy sets Referrer-Policy header
	ReferrerPolicy string
	// StrictTransportSecurity sets HSTS header
	StrictTransportSecurity string
	// PermissionsPolicy sets Permissions-Policy header
	PermissionsPolicy string
	// CrossOriginEmbedderPolicy sets COEP header
	CrossOriginEmbedderPolicy string
	// CrossOriginOpenerPolicy sets COOP header
	CrossOriginOpenerPolicy string
	// CrossOriginResourcePolicy sets CORP header
	CrossOriginResourcePolicy string
}

type Severity string

type XSSConfig struct {
	ContentSecurityPolicy string
	EnableCSP             bool
	EnableCSPReportOnly   bool
	CSPReportURI          string
	XSSProtection         bool
	ContentTypeOptions    bool
	FrameOptions          string
	ReferrerPolicy        string
	PermissionsPolicy     string
	AllowInlineScripts    bool
}

type XSSProtectionMiddleware struct {
	// contains filtered or unexported fields
}