web

type Auth interface {
	RequireUser(ctx context.Context, w http.ResponseWriter, r *http.Request) (string, error)
}

type Config struct {
	Storage     Storage
	Auth        Auth
	AdminKey    usermgr.AdminKey
	DownloadURL string
}

type FileStorage struct {
	Path string
}

type NilAuth struct {
}

type OauthAuth struct {
	Config             oauth2.Config
	UserInfoURL        string
	EmailSuffix        string
	TokenSigningKey    []byte
	ValidateRemoteUser func(usermgr.User) (isAdmin bool, err error)
}

type OpenIDUserInfo struct {
	// Subject - Identifier for the End-User at the Issuer.
	Sub string `json:"sub"`

	// End-User's full name in displayable form including all name parts,
	// possibly including titles and suffixes, ordered according to the
	// End-User's locale and preferences.
	Name string `json:"name"`

	// End-User's preferred e-mail address. Its value MUST conform to the
	// RFC 5322 [RFC5322] addr-spec syntax. The RP MUST NOT rely upon this
	// value being unique, as discussed in Section 5.7.
	Email string `json:"email"`
}

type RemoteUser struct {
	Name    string
	IsAdmin bool
}

type Server struct {
	Mux         *web.Mux
	Storage     Storage
	Auth        Auth
	ContextFunc func() context.Context
	AdminKey    usermgr.AdminKey
	DownloadURL string
}

type Storage interface {
	Get(ctx context.Context, etag string) (data []byte, newEtag string, err error)
	Put(ctx context.Context, data []byte) (etag string, err error)
}