apikey

type Argon2idHasher struct {
	// contains filtered or unexported fields
}

type CacheOption func(*CachedLookupConfig)

type CachedLookup struct {
	// contains filtered or unexported fields
}

type CachedLookupConfig struct {
	L1TTL          time.Duration
	L2TTL          time.Duration
	NegativeTTL    time.Duration
	L1MaxEntries   int
	RedisKeyPrefix string
	Namespace      string
}

type CachedRevoker struct {
	// contains filtered or unexported fields
}

type CachedRotator struct {
	// contains filtered or unexported fields
}

type Config struct {
	HeaderName       string        `mapstructure:"header_name"`
	HeaderScheme     string        `mapstructure:"header_scheme"`
	HasherMode       string        `mapstructure:"hasher_mode"`
	HMACSecret       string        `mapstructure:"hmac_secret"`
	KeyPrefix        string        `mapstructure:"key_prefix"`
	KeyIDLength      int           `mapstructure:"key_id_length"`
	SecretLength     int           `mapstructure:"secret_length"`
	SkewAllowance    time.Duration `mapstructure:"skew_allowance"`
	SetPrincipalCtx  bool          `mapstructure:"set_principal_ctx"`
	SetPrincipalBody bool          `mapstructure:"set_principal_body"`
	DetailedErrors   bool          `mapstructure:"detailed_errors"`
}

type Generator interface {
	GenerateRawKey(prefix string) (rawKey string, keyID string, secret string, err error)
	ParseRawKey(rawKey string) (keyID string, secret string, err error)
}

type HMACSHA256Hasher struct {
	// contains filtered or unexported fields
}

type Hasher interface {
	Hash(secret string) (string, error)
	Verify(hash string, secret string) (bool, error)
}

type IssuedKey struct {
	KeyID      string            `json:"key_id"`
	AppID      string            `json:"app_id"`
	RawKey     string            `json:"raw_key"`
	Prefix     string            `json:"prefix"`
	SecretHash string            `json:"-"`
	Scopes     []string          `json:"scopes"`
	Metadata   map[string]string `json:"metadata,omitempty"`
	ExpiresAt  *time.Time        `json:"expires_at,omitempty"`
}

type KeyGenerator struct {
	// contains filtered or unexported fields
}

type KeyLookup interface {
	FindByKeyID(ctx context.Context, keyID string) (*StoredKey, error)
}

type KeyUsageRecorder interface {
	MarkUsed(ctx context.Context, keyID string, usedAt time.Time) error
}

type LookupInvalidator interface {
	InvalidateKey(ctx context.Context, keyID string) error
}

type Manager interface {
	IssueKey(appID string, prefix string, scopes []string, metadata map[string]string, expiresAt *time.Time) (*IssuedKey, error)
	ValidateRawKey(ctx context.Context, rawKey string) (*Principal, error)
	Middleware() fiber.Handler
	RevokeKey(ctx context.Context, keyID string, reason string) error
	RotateKey(ctx context.Context, keyID string, prefix string) (*IssuedKey, error)
}

type NewServiceParams struct {
	Config    Config
	Generator Generator
	Hasher    Hasher
	Lookup    KeyLookup
	Recorder  KeyUsageRecorder
	Revoker   Revoker
	Rotator   Rotator
}

type Principal struct {
	Type     string            `json:"type"`
	AppID    string            `json:"app_id"`
	KeyID    string            `json:"key_id"`
	Scopes   []string          `json:"scopes"`
	Metadata map[string]string `json:"metadata,omitempty"`
}

type Revoker interface {
	RevokeKey(ctx context.Context, keyID string, reason string) error
}

type Rotator interface {
	RotateKey(ctx context.Context, keyID string, prefix string) (*IssuedKey, error)
}

type SaltedSHA256Hasher struct{}

type Service struct {
	// contains filtered or unexported fields
}

type StoredKey struct {
	KeyID      string
	AppID      string
	SecretHash string
	Scopes     []string
	Metadata   map[string]string
	ExpiresAt  *time.Time
	RevokedAt  *time.Time
}