http

type Handlers struct {
	UI          *ui.UIHandler
	API         *api.APIHandler
	InternalAPI *internalapi.Handler
}

type Middlewares struct {
	RedirectIfAuthenticated func(http.Handler) http.Handler

	RequireAppAccessAuthWithRefresh      func(http.Handler) http.Handler
	RequireAppAccessAuthAPI              func(http.Handler) http.Handler
	RequireAdminAccessAuthWithRefresh    func(http.Handler) http.Handler
	RequireAdminAccessAuthAPI            func(http.Handler) http.Handler
	RequireOperatorAccessAuthWithRefresh func(http.Handler) http.Handler
	RequireOperatorAccessAuthAPI         func(http.Handler) http.Handler
	RequireAppVerifiedEmailUI            func(http.Handler) http.Handler
	RequireAppVerifiedEmailAPI           func(http.Handler) http.Handler
	RequireAdminVerifiedEmailUI          func(http.Handler) http.Handler
	RequireOperatorVerifiedEmailUI       func(http.Handler) http.Handler
	RequireRecentAuthenticationUI        func(http.Handler) http.Handler
	RequireRecentAuthenticationAPI       func(http.Handler) http.Handler
	RequireInternalAPIAuth               func(http.Handler) http.Handler
	RequirePublicOrganizationManagement  func(http.Handler) http.Handler
	RequireAdminRole                     func(http.Handler) http.Handler
	RequireOperatorRole                  func(http.Handler) http.Handler

	RequireCSRF    func(http.Handler) http.Handler
	RequireAPICSRF func(http.Handler) http.Handler

	ReturnTo                  func(http.Handler) http.Handler
	HTMX                      func(http.Handler) http.Handler
	RequireChallengeEnabled   func(http.Handler) http.Handler
	RequireAllowlistEnabled   func(http.Handler) http.Handler
	OptionalAppAccessIdentity func(http.Handler) http.Handler
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	Version           string
	Addr              string
	Dev               bool
	TrustProxyHeaders bool
	TrustedProxyCIDRs []netip.Prefix
	Logger            *slog.Logger
	Observability     *observability.Service
	OAuthProviders    oauth.OAuthProviders
	Handlers          Handlers
	Readiness         *meta.Readiness
	// contains filtered or unexported fields
}