http

type Middlewares struct {
	RedirectIfAuthenticated func(http.Handler) http.Handler

	RequireAppAccessAuthWithRefresh   func(http.Handler) http.Handler
	RequireAppAccessAuthAPI           func(http.Handler) http.Handler
	RequireAdminAccessAuthWithRefresh func(http.Handler) http.Handler
	RequireAdminAccessAuthAPI         func(http.Handler) http.Handler
	RequireAdminRole                  func(http.Handler) http.Handler

	RequireCSRF    func(http.Handler) http.Handler
	RequireAPICSRF func(http.Handler) http.Handler

	ReturnTo                  func(http.Handler) http.Handler
	HTMX                      func(http.Handler) http.Handler
	RequireChallengeEnabled   func(http.Handler) http.Handler
	OptionalAppAccessIdentity func(http.Handler) http.Handler
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	Version          string
	Addr             string
	Dev              bool
	Auth             *auth.Service
	Session          *session.Service
	Challenge        *challenge.Service
	ChallengeEnabled bool
	Verification     *challenge.VerificationCodeService
	Logger           *slog.Logger
	Store            *store.Store
	AuthLimiter      ratelimiter.AuthLimiter
	Google           *google.Client
	OAuthProviders   oauth.OAuthProviders
	AccessTokenTTL   time.Duration
	RefreshTokenTTL  time.Duration
	Render           render.Renderer
}