sessionstate

type AssuranceSummary struct {
	Level     int
	Method    string
	Scope     string
	ProvenAt  time.Time
	ExpiresAt time.Time
}

type BackendAffinitySummary struct {
	Type        string
	Name        string
	Protocol    string
	Authority   string
	OpaqueToken string
}

type CeremonyRecord struct {
	Record
	Session           Handle
	Flow              Handle
	IdentityReference string
	Protocol          string
	Kind              string
	Attempt           uint64
	Payload           json.RawMessage
	ConsumedAt        time.Time
}

type Clock interface {
	Now() time.Time
}

type CommitRequest[T any] struct {
	Reference        Reference
	ExpectedRevision Revision
	Value            T
	TTL              time.Duration
}

type ConsentGrant struct {
	Record
	IdentityReference string
	ClientID          string
	Scopes            []string
	GrantedAt         time.Time
	GrantExpiresAt    time.Time
}

type Contract struct {
	Invariant    Invariant
	RuntimeOwner string
	TestOwner    string
}

type DeleteRequest struct {
	Reference        Reference
	ExpectedRevision Revision
}

type EnrollmentRecord struct {
	Record
	Session           Handle
	Flow              Handle
	AccountReference  string
	IdentityReference string
	RequiredMethods   []string
	CompletedMethods  []string
	CurrentStep       string
	Continuation      string
	Completed         bool
	// SelfService binds an optional enrollment to the authenticated session instead of a protocol flow.
	SelfService bool
}

type Event struct {
	Kind  EventKind
	Owner Owner
}

type EventKind string

type Handle string

type HandleGenerator interface {
	NewHandle() (Handle, error)
}

type IdentitySummary struct {
	Account     string
	Subject     string
	DisplayName string
	Protocol    string
}

type Invariant string

type Keyspace struct {
	// contains filtered or unexported fields
}

type LegacyCookieItem struct {
	Name  string
	Key   string
	Owner Owner
}

type LogoutIndex struct {
	Record
	Session           Handle
	IdentityReference string
	Account           string
	OIDCClientIDs     []string
}

type Metrics interface {
	Observe(event Event)
}

type OIDCFlow struct {
	Record
	Session              Handle
	ParentFlow           Handle
	FlowType             string
	CurrentStep          string
	AuthOutcome          string
	CancelTarget         string
	ReturnTarget         string
	ResumeTarget         string
	CreatedAt            time.Time
	UpdatedAt            time.Time
	PendingMFA           bool
	ClientID             string
	RedirectURI          string
	ResponseType         string
	GrantType            string
	DeviceCode           string
	DeviceUserCodeDigest string
	Scopes               []string
	Resources            []string
	State                string
	Nonce                string
	Prompt               string
	CodeChallenge        string
	CodeChallengeMethod  string
	ConsentChallenge     string
	ConsentDecision      string
	Authenticated        bool
	AssuranceSatisfied   bool
	Issuable             bool
	Issued               bool
	Consumed             bool
}

type OIDCFlowRepository interface {
	Repository[OIDCFlow]
}

type OwnedReference struct {
	Owner     Owner
	Reference Reference
}

type Owner string

type RandomHandleGenerator struct {
	// contains filtered or unexported fields
}

type Record struct {
	Handle    Handle
	Revision  Revision
	ExpiresAt time.Time
}

type RedisRepository[T any] struct {
	// contains filtered or unexported fields
}

type RedisStoreConfig struct {
	Prefix        string
	DefaultTTL    time.Duration
	TouchInterval time.Duration
}

type RedisStores struct {
	Session      *RedisRepository[SessionAnchor]
	OIDC         *RedisRepository[OIDCFlow]
	SAML         *RedisRepository[SAMLFlow]
	SelfService  *RedisRepository[SelfServiceFlow]
	Enrollment   *RedisRepository[EnrollmentRecord]
	StepUp       *RedisRepository[StepUpRecord]
	Ceremony     *RedisRepository[CeremonyRecord]
	TOTPRecovery *RedisRepository[TOTPRecoveryRecord]
	Consent      *RedisRepository[ConsentGrant]
	Logout       *RedisRepository[LogoutIndex]
	// contains filtered or unexported fields
}

type Reference struct {
	Session Handle
	Record  Handle
}

type Repository[T any] interface {
	Load(ctx context.Context, reference Reference) (Versioned[T], error)
	Commit(ctx context.Context, request CommitRequest[T]) (Revision, error)
	Delete(ctx context.Context, request DeleteRequest) error
}

type Revision uint64

type RevocationRequest struct {
	Reference        Reference
	ExpectedRevision Revision
	TombstoneTTL     time.Duration
	Children         []OwnedReference
	RejectRevoked    bool
}

type SAMLFlow struct {
	Record
	Session            Handle
	ParentFlow         Handle
	FlowType           string
	CurrentStep        string
	AuthOutcome        string
	CancelTarget       string
	ReturnTarget       string
	CreatedAt          time.Time
	UpdatedAt          time.Time
	PendingMFA         bool
	EntityID           string
	RequestID          string
	RequestDigest      string
	RelayState         string
	Destination        string
	OriginalURL        string
	ResumeTarget       string
	Logout             bool
	Authenticated      bool
	EnrollmentComplete bool
	AssuranceSatisfied bool
	Issuable           bool
	Issued             bool
	Consumed           bool
}

type SAMLFlowRepository interface {
	Repository[SAMLFlow]
}

type SelfServiceFlow struct {
	FlowType     string
	CurrentStep  string
	AuthOutcome  string
	LoginTarget  string
	ResumeTarget string
	Record
	Session   Handle
	CreatedAt time.Time
	UpdatedAt time.Time
}

type SelfServiceFlowRepository interface {
	Repository[SelfServiceFlow]
}

type SessionAnchor struct {
	Record
	SchemaVersion        uint8
	CreatedAt            time.Time
	IdleExpiresAt        time.Time
	AbsoluteExpiresAt    time.Time
	LastTouchedAt        time.Time
	Authenticated        bool
	IdentityReference    string
	Identity             IdentitySummary
	BackendAffinity      BackendAffinitySummary
	MFAIdentityReference string
	MFAIdentity          IdentitySummary
	MFABackendAffinity   BackendAffinitySummary
	Assurance            AssuranceSummary
	RotatedFrom          Handle
	OIDCFlows            []Handle
	SAMLFlows            []Handle
	SelfServiceFlows     []Handle
	Enrollments          []Handle
	StepUps              []Handle
	Ceremonies           []Handle
	TOTPRecovery         []Handle
	LogoutIndexes        []Handle
	Revoked              bool
	Tombstone            bool
}

type SessionRepository interface {
	Repository[SessionAnchor]
}

type StepUpRecord struct {
	Record
	Session                  Handle
	Flow                     Handle
	AuthOutcome              string
	PendingIdentityReference string
	PendingIdentity          IdentitySummary
	PendingBackendAffinity   BackendAffinitySummary
	SelfServiceOperation     string
	SelfServiceCredentialID  string
	SelfServiceDeviceName    string
	RequestedLevel           int
	SupportedMethods         []string
	MethodLevels             map[string]int
	ProofMethod              string
	CompletedAt              time.Time
	FreshUntil               time.Time
	Scope                    string
	Completed                bool
}

type TOTPRecoveryRecord struct {
	Record
	Session           Handle
	Flow              Handle
	AccountReference  string
	IdentityReference string
	OperationID       string
	Kind              string
	PendingMaterial   []byte
	RecoveryCodes     []string
	Generated         bool
	Saved             bool
	RetryCount        uint8
}

type Transaction interface {
	Commit(ctx context.Context, request TransactionRequest) (TransactionReceipt, error)
}

type TransactionFactory interface {
	Begin(ctx context.Context, session Handle) (Transaction, error)
}

type TransactionReceipt struct {
	Revision Revision
}

type TransactionRequest struct {
	Session      *CommitRequest[SessionAnchor]
	OIDC         []CommitRequest[OIDCFlow]
	SAML         []CommitRequest[SAMLFlow]
	SelfService  []CommitRequest[SelfServiceFlow]
	Enrollment   []CommitRequest[EnrollmentRecord]
	StepUp       []CommitRequest[StepUpRecord]
	Ceremony     []CommitRequest[CeremonyRecord]
	TOTPRecovery []CommitRequest[TOTPRecoveryRecord]
	Logout       []CommitRequest[LogoutIndex]
}

type Versioned[T any] struct {
	Value    T
	Revision Revision
}