keeper

type Access interface {
	Path() string

	PathPattern() string

	Method() string

	GetSessionData() []byte

	SetSessionData(data []byte)
}

type Authentication interface {
	Mechanism() string
	UserID() string
	UserSecret() []byte
}

type AuthenticationManager interface {
	Authenticate(ctx context.Context, a Authentication) (Identity, error)
}

type Authenticator interface {
	Supports(ctx context.Context, a Authentication) bool
	Verify(ctx context.Context, a Authentication) (Identity, error)
}

type AuthenticatorRegistration struct {
	Name          string
	Authenticator Authenticator
}

type AuthenticatorRegistry interface {
	GetRegistrationList() []*AuthenticatorRegistration
}

type Authorization interface {
	Identity() Identity
	Method() string
	Path() string
	PathPattern() string
}

type AuthorizationManager interface {
	Accept(ctx context.Context, a Authorization) bool
}

type Authorizer interface {
	Supports(ctx context.Context, a Authorization) bool
	Accept(ctx context.Context, a Authorization) bool
}

type AuthorizerRegistration struct {
	Name       string
	Authorizer Authorizer
}

type AuthorizerRegistry interface {
	GetRegistrationList() []*AuthorizerRegistration
}

type Configurer interface {
	Configure(c *Context) error
}

type Context struct {
	Authentications AuthenticationManager

	Authorizations AuthorizationManager

	Subjects SubjectManager

	Permissions PermissionManager

	SessionProvider SessionProvider
}

type Holder struct {
	// contains filtered or unexported fields
}

type Identity interface {
	UserID() string
	UserUUID() string
	Nickname() string
	Avatar() string
	Roles() []string
}

type Permission interface {
	Accept(ctx context.Context, a Access) bool

	AcceptAnonymous() bool
}

type PermissionManager interface {
	FindPermissions(ctx context.Context, a Access) []Permission
}

type PermissionRegistration struct {
	Methods  []string // 操作方法表达式
	Paths    []string // 资源路径表达式
	Subjects []string // 操作主体表达式

	Permission Permission // 注册时如果为nil，就使用默认的处理器
}

type PermissionRegistry interface {
	GetRegistrationList() []*PermissionRegistration
}

type SecurityContext interface {
	GetAuthentications() AuthenticationManager

	GetAuthorizations() AuthorizationManager

	GetSubjects() SubjectManager

	GetPermissions() PermissionManager

	GetSessionProvider() SessionProvider
}

type Session interface {
	GetContext() context.Context

	// 可持久化的属性
	Properties() collection.Properties

	BeginTransaction() SessionTransaction
}

type SessionAdapter interface {
	GetContext() context.Context
	Load(s Session) error
	Store(s Session) error
}

type SessionAdapterFactory interface {
	Create(ctx context.Context) (SessionAdapter, error)
}

type SessionContext struct {
	Access          Access
	Adapter         SessionAdapter
	Context         context.Context
	SecurityContext SecurityContext
	Session         Session
	Subject         Subject
}

type SessionFactory interface {
	Create(adapter SessionAdapter) (Session, error)
}

type SessionLoader interface {
	Load(data []byte) (Session, error)
}

type SessionProvider interface {
	GetSessionFactory() SessionFactory
	GetAdapterFactory() SessionAdapterFactory
}

type SessionProviderRegistration struct {
	Name     string
	Provider SessionProvider
}

type SessionProviderRegistry interface {
	GetRegistrationList() []*SessionProviderRegistration
}

type SessionSerializer interface {
	Serialize(s Session) ([]byte, error)
}

type SessionTransaction interface {
	io.Closer
	Commit() error
}

type Subject interface {
	GetSession(create bool) (Session, error)

	GetAccess() Access

	GetContext() context.Context

	IsAuthenticated() bool

	SetSession(s Session)

	SetAccess(a Access)

	SetAuthenticated(authenticated bool)

	Login(ctx context.Context, a Authentication) (Identity, error)

	Logout() error

	Authorize(ctx context.Context, a Access) (bool, error)
}

type SubjectManager interface {
	GetSubject(ctx context.Context) (Subject, error)
}