transport

type ActivateRequest struct {
	Username string `json:"username"`
}

type AssignRolePermissionsRequest struct {
	RoleCode    string   `json:"roleCode"`
	Permissions []string `json:"permissions"`
}

type AssignRolesRequest struct {
	Username string   `json:"username"`
	Roles    []string `json:"roles"`
}

type Authenticator interface {
	Authenticate(database, username, password string) (*driver.AuthenticatedUser, error)
	RegisterUser(database, username, password, displayName string) (*driver.AuthenticatedUser, error)
	ActivateUser(database, username string) (*driver.AuthenticatedUser, error)
	DeactivateUser(database, username string) (*driver.AuthenticatedUser, error)
	AssignRoles(database, username string, roleCodes []string) (*driver.AuthenticatedUser, error)
	AssignRolePermissions(database, roleCode string, permissionCodes []string) error
	InitSDBPassword(database string) error
	BindUserDatabase(database string, approver *driver.AuthenticatedUser, username string) error
	RevokeUserDatabase(database string, approver *driver.AuthenticatedUser, username string) error
}

type ErrorBody struct {
	Code    string `json:"code"`
	Message string `json:"message"`
}

type HTTPServer struct {
	Database                 string
	LoginPath                string
	RegisterPath             string
	RefreshPath              string
	LogoutPath               string
	ActivatePath             string
	DeactivatePath           string
	AssignRolePath           string
	AssignRolePermissionPath string
	InitSDBPasswordPath      string
	SQLExecutePath           string
	SQLGrantPath             string
	SQLRevokePath            string
	SQLAllowedOps            map[string]struct{} // nil = 不限制
	LimitEnabled             bool
	LimitRequests            int
	LimitWindow              time.Duration
	LimitNoTokenPaths        map[string]struct{}

	InitPassword string

	TokenTTL    time.Duration
	TokenSecret string
	// contains filtered or unexported fields
}

type InitSDBPasswordRequest struct {
	Password string `json:"password"`
}

type IssuedToken struct {
	AccessToken string `json:"accessToken"`
	TokenType   string `json:"tokenType"`
	ExpiresAt   int64  `json:"expiresAt"`
}

type LoginRequest struct {
	Username string `json:"username"`
	Password string `json:"password"`
}

type LoginResponse struct {
	Success bool                      `json:"success"`
	User    *driver.AuthenticatedUser `json:"user,omitempty"`
	Token   *TokenResponse            `json:"token,omitempty"`
	Error   *ErrorBody                `json:"error,omitempty"`
}

type Option func(*HTTPServer)

type RegisterRequest struct {
	Username    string `json:"username"`
	Password    string `json:"password"`
	DisplayName string `json:"displayName"`
}

type SQLExecuteRequest struct {
	SQL       string         `json:"sql"`
	ParamMap  map[string]any `json:"paramMap"`
	ParamList []any          `json:"paramList"`
	Params    map[string]any `json:"params,omitempty"`
}

type SQLExecuteResponse struct {
	Success bool            `json:"success"`
	Result  *api.ExecResult `json:"result,omitempty"`
	Error   *ErrorBody      `json:"error,omitempty"`
}

type SQLGrantRequest struct {
	Database string `json:"database,omitempty"`
	Username string `json:"username,omitempty"`
	// legacy aliases
	Table   string `json:"table,omitempty"`
	Grantee string `json:"grantee,omitempty"`
}

type SQLGrantResponse struct {
	Success bool       `json:"success"`
	Error   *ErrorBody `json:"error,omitempty"`
}

type TokenClaims struct {
	TokenID     string   `json:"jti"`
	Subject     string   `json:"sub"`
	Username    string   `json:"username"`
	DisplayName string   `json:"displayName,omitempty"`
	Status      string   `json:"status,omitempty"`
	IsAdmin     bool     `json:"isAdmin"`
	Roles       []string `json:"roles,omitempty"`
	Permissions []string `json:"permissions,omitempty"`
	IssuedAt    int64    `json:"iat"`
	ExpiresAt   int64    `json:"exp"`
}

type TokenManager struct {
	// contains filtered or unexported fields
}

type TokenResponse struct {
	AccessToken string `json:"accessToken"`
	TokenType   string `json:"tokenType"`
	ExpiresAt   int64  `json:"expiresAt"`
}