oauthmanager

type CredentialHealthInfo struct {
	ID                string        `json:"id"`
	IsHealthy         bool          `json:"is_healthy"`
	IsAvailable       bool          `json:"is_available"`
	FailureCount      int           `json:"failure_count"`
	SuccessRate       float64       `json:"success_rate"`
	RequestCount      int64         `json:"request_count"`
	TokensUsed        int64         `json:"tokens_used"`
	AverageLatency    time.Duration `json:"average_latency"`
	LastUsed          time.Time     `json:"last_used"`
	LastSuccess       time.Time     `json:"last_success"`
	LastFailure       time.Time     `json:"last_failure"`
	BackoffUntil      time.Time     `json:"backoff_until,omitempty"`
	RefreshCount      int           `json:"refresh_count"`
	LastRefresh       time.Time     `json:"last_refresh"`
	RefreshFailCount  int           `json:"refresh_fail_count"`
	ExpiresAt         time.Time     `json:"expires_at,omitempty"`
	MarkedForRotation bool          `json:"marked_for_rotation"`
	DecommissionAt    time.Time     `json:"decommission_at,omitempty"`
}

type CredentialMetrics struct {

	// Usage tracking
	RequestCount int64 // Total requests using this credential
	SuccessCount int64 // Successful requests
	ErrorCount   int64 // Failed requests

	// Token usage
	TokensUsed int64 // Cumulative tokens consumed

	// Performance
	TotalLatency   time.Duration // Cumulative latency
	AverageLatency time.Duration // Calculated average

	// Timing
	FirstUsed time.Time // When credential was first used
	LastUsed  time.Time // Most recent usage

	// Refresh tracking
	RefreshCount    int       // Number of token refreshes
	LastRefreshTime time.Time // Last successful refresh
	// contains filtered or unexported fields
}

type HealthSummary struct {
	TotalCredentials     int                             `json:"total_credentials"`
	HealthyCredentials   int                             `json:"healthy_credentials"`
	UnhealthyCredentials int                             `json:"unhealthy_credentials"`
	CredentialsInBackoff int                             `json:"credentials_in_backoff"`
	TotalRequests        int64                           `json:"total_requests"`
	SuccessRate          float64                         `json:"success_rate"`
	Credentials          map[string]CredentialHealthInfo `json:"credentials"`
}

type MonitoringConfig struct {
	// Webhooks
	WebhookURL    string   // URL for webhook notifications
	WebhookEvents []string // Events to notify: "refresh", "failure", "rotation", "expiry_warning"

	// Alerting
	AlertOnHighFailureRate bool    // Alert if error rate > threshold
	FailureRateThreshold   float64 // Default: 0.25 (25%)

	AlertOnRefreshFailure bool          // Alert on refresh failures
	AlertOnExpirySoon     bool          // Alert when tokens expire soon
	ExpiryWarningTime     time.Duration // Default: 24 hours
}

type OAuthKeyManager struct {
	// contains filtered or unexported fields
}

type PrometheusMetrics struct {
	RequestsTotal    map[string]int64           // Counter per credential
	SuccessTotal     map[string]int64           // Success counter per credential
	ErrorsTotal      map[string]int64           // Error counter per credential
	TokensUsedTotal  map[string]int64           // Token usage counter per credential
	RefreshesTotal   map[string]int64           // Refresh counter per credential
	LatencyHistogram map[string][]time.Duration // Latency samples per credential
}

type RefreshFunc func(ctx context.Context, cred *types.OAuthCredentialSet) (*types.OAuthCredentialSet, error)

type RefreshStrategy struct {
	// Buffer configuration
	BufferTime time.Duration // Time before expiry to refresh (default: 5 min)

	// Adaptive refresh
	AdaptiveBuffer bool          // Adjust buffer based on usage patterns
	MinBuffer      time.Duration // Minimum buffer (default: 1 min)
	MaxBuffer      time.Duration // Maximum buffer (default: 15 min)

	// Preemptive refresh
	PreemptiveRefresh    bool  // Refresh before buffer for high-traffic creds
	HighTrafficThreshold int64 // Requests/hour to trigger preemptive (default: 100)
}

type RotationPolicy struct {
	Enabled          bool          // Enable automatic rotation
	RotationInterval time.Duration // How often to rotate (default: 30 days)
	GracePeriod      time.Duration // Overlap period (default: 7 days)
	AutoDecommission bool          // Automatically remove old credentials

	// Callbacks
	OnRotationNeeded func(credentialID string) error // Called when rotation is due
	OnDecommission   func(credentialID string) error // Called before removal
}

type WebhookEvent struct {
	Type         string                 `json:"type"` // "refresh", "failure", "rotation", "expiry_warning"
	CredentialID string                 `json:"credential_id"`
	Timestamp    time.Time              `json:"timestamp"`
	Message      string                 `json:"message"`
	Details      map[string]interface{} `json:"details,omitempty"`
}