auth

type AuthnProvider interface {
	Authenticate(ctx context.Context, reqHeaders func(name string) string, query url.Values) (Session, error)
}

type Authorizer struct {
	Authz AuthzProvider
}

type AuthzProvider interface {
	Check(ctx context.Context, s Session, verb PermissionAction, resource Resource) error
}

type JWTClaims struct {
	jwt.RegisteredClaims
	// Authentication method used to obtain this token
	AuthMethod        Method       `json:"auth_method"`
	AuthMethodSubject string       `json:"auth_method_sub"`
	Permissions       []Permission `json:"permissions"`
}

type JWTManager struct {
	// contains filtered or unexported fields
}

type Method string

type Permission struct {
	Action          PermissionAction `json:"action"`   // The action type (publish or edit)
	ResourcePattern string           `json:"resource"` // e.g., "io.github.username/*"
}

type PermissionAction string

type Principal struct {
	User User
}

type Resource struct {
	Name string
	Type string
}

type Session interface {
	Principal() Principal
}

type TokenResponse struct {
	RegistryToken string `json:"registry_token"`
	ExpiresAt     int    `json:"expires_at"`
}

type User struct {
	Permissions []Permission
}