auth

type Principal struct {
	UserID      string
	Username    string
	Permissions map[string]struct{}
	ByAPIKey    bool
}

type Role struct {
	ID          string    `json:"id"`
	Name        string    `json:"name"`
	Builtin     bool      `json:"builtin"`
	Permissions []string  `json:"permissions"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type Service struct {
	// contains filtered or unexported fields
}

type Session struct {
	ID         string
	UserID     string
	ExpiresAt  time.Time
	CreatedAt  time.Time
	LastSeenAt time.Time
}

type Store interface {
	EnsureAuthDefaults(ctx context.Context, roles []Role) error
	CountAuthUsers(ctx context.Context) (int, error)
	CreateInitialAuthUser(ctx context.Context, user StoredUser, roleIDs []string) error
	GetAuthUserByUsername(ctx context.Context, username string) (*StoredUser, error)
	GetAuthUserByID(ctx context.Context, userID string) (*StoredUser, error)
	ListAuthUsers(ctx context.Context) ([]StoredUser, error)
	UpsertAuthUser(ctx context.Context, user StoredUser) error
	DeleteAuthUser(ctx context.Context, userID string) error
	ListAuthRoles(ctx context.Context) ([]Role, error)
	UpsertAuthRole(ctx context.Context, role Role) error
	DeleteAuthRole(ctx context.Context, roleID string) error
	ReplaceAuthUserRoles(ctx context.Context, userID string, roleIDs []string) error
	ListAuthUserRoleIDs(ctx context.Context, userID string) ([]string, error)
	CreateAuthSession(ctx context.Context, session Session) error
	GetAuthSession(ctx context.Context, sessionID string) (*Session, error)
	TouchAuthSession(ctx context.Context, sessionID string, seenAt time.Time) error
	DeleteAuthSession(ctx context.Context, sessionID string) error
	CreateAuthToken(ctx context.Context, token StoredToken) error
	ListAuthTokens(ctx context.Context) ([]Token, error)
	ListAuthTokensByUserID(ctx context.Context, userID string) ([]Token, error)
	GetAuthTokenByHash(ctx context.Context, tokenHash string) (*StoredToken, error)
	GetAuthTokenByID(ctx context.Context, tokenID string) (*StoredToken, error)
	TouchAuthToken(ctx context.Context, tokenID string, seenAt time.Time) error
	RevokeAuthToken(ctx context.Context, tokenID string) error
}

type StoredToken struct {
	Token
	TokenHash string
}

type StoredUser struct {
	User
	PasswordHash string
}

type Token struct {
	ID         string     `json:"id"`
	UserID     string     `json:"user_id"`
	Name       string     `json:"name"`
	Prefix     string     `json:"prefix"`
	CreatedAt  time.Time  `json:"created_at"`
	LastUsedAt *time.Time `json:"last_used_at,omitempty"`
	RevokedAt  *time.Time `json:"revoked_at,omitempty"`
}

type User struct {
	ID          string    `json:"id"`
	Username    string    `json:"username"`
	Enabled     bool      `json:"enabled"`
	RoleIDs     []string  `json:"role_ids,omitempty"`
	Permissions []string  `json:"permissions,omitempty"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}