cookie

type CanonicalMode uint8

type CanonicalRuntime struct {
	// contains filtered or unexported fields
}

type CanonicalSession struct {
	Handle sessionstate.Handle
	Anchor sessionstate.Versioned[sessionstate.SessionAnchor]
	Stores *sessionstate.RedisStores
	// contains filtered or unexported fields
}

type Envelope struct {
	Version  uint8
	Session  sessionstate.Handle
	KeyEpoch uint16
	Flags    uint8
}

type EnvelopeCodec struct {
	// contains filtered or unexported fields
}

type IdentityUpdate struct {
	Reference          string
	Account            string
	Subject            string
	DisplayName        string
	Protocol           string
	BackendAffinity    *SessionBackendAffinity
	MFAIdentity        *SessionIdentity
	MFABackendAffinity *SessionBackendAffinity
}

type LoginCompletionInput struct {
	Identity    IdentityUpdate
	Flow        sessionstate.Handle
	Protocol    string
	NextStep    string
	RememberTTL time.Duration
}

type Manager interface {
	// Set stores a key-value pair in the cookie data.
	Set(key string, value any)

	// Get retrieves a value by key from the cookie data.
	// Returns nil and false if the key does not exist.
	Get(key string) (any, bool)

	// Delete removes a key from the cookie data.
	Delete(key string)

	// Clear removes all data from the cookie.
	Clear()

	// Save persists the encrypted cookie to the response.
	Save(ctx *gin.Context) error

	// Load reads and decrypts the cookie from the request.
	// If the cookie does not exist or cannot be decoded, it initializes empty data.
	Load(ctx *gin.Context) error

	// GetString retrieves a string value by key, returning the default if not found or wrong type.
	GetString(key string, defaultValue string) string

	// GetInt retrieves an int value by key, returning the default if not found or wrong type.
	GetInt(key string, defaultValue int) int

	// GetInt64 retrieves an int64 value by key, returning the default if not found or wrong type.
	GetInt64(key string, defaultValue int64) int64

	// GetUint8 retrieves a uint8 value by key, returning the default if not found or wrong type.
	GetUint8(key string, defaultValue uint8) uint8

	// GetBool retrieves a bool value by key, returning the default if not found or wrong type.
	GetBool(key string, defaultValue bool) bool

	// GetStringSlice retrieves a []string value by key, returning the default if not found or wrong type.
	GetStringSlice(key string, defaultValue []string) []string

	// GetDuration retrieves a time.Duration value by key, returning the default if not found or wrong type.
	GetDuration(key string, defaultValue time.Duration) time.Duration

	// GetBytes retrieves a []byte value by key, returning the default if not found or wrong type.
	GetBytes(key string, defaultValue []byte) []byte

	// Debug logs the current cookie data with sensitive values masked.
	Debug(ctx *gin.Context, logger *slog.Logger, msg string)

	// HasKey checks if a key exists in the cookie data.
	HasKey(key string) bool

	// SetMaxAge sets the maximum age of the cookie in seconds.
	SetMaxAge(maxAge int)

	// ComputeHMAC returns an HMAC-SHA256 tag for the given data using the codec's auth key.
	// Used for defense-in-depth integrity checks on security-critical session values.
	ComputeHMAC(data []byte) []byte
}

type OIDCLogoutContext struct {
	Identity  SessionIdentity
	ClientIDs []string
}

type SecureCodec struct {
	// contains filtered or unexported fields
}

type SecureManager struct {
	// contains filtered or unexported fields
}

type SessionAssurance struct {
	Level     int
	Method    string
	Scope     string
	ProvenAt  time.Time
	ExpiresAt time.Time
}

type SessionBackendAffinity struct {
	Type        string
	Name        string
	Protocol    string
	Authority   string
	OpaqueToken string
}

type SessionIdentity struct {
	Reference   string
	Account     string
	Subject     string
	DisplayName string
	Protocol    string
}

type StepUpCompletion struct {
	Handle               sessionstate.Handle
	Flow                 sessionstate.Handle
	SelfServiceOperation string
	Method               string
	Scope                string
	Level                int
	ProvenAt             time.Time
	FreshUntil           time.Time
}

type WebAuthnCeremonyReferenceState struct {
	Dedicated string
	Legacy    string
}

type WebAuthnCeremonyReferenceStateManager interface {
	WebAuthnCeremonyReferenceState() WebAuthnCeremonyReferenceState
}