auth

type AccessPermissionMetadata struct {
	AccessPermissions *jwt.SubClaimsAccessPermissions
}

type EmptyMetadata struct{}

type MembershipMetadata struct {
	SpaceID int64
	Role    enum.MembershipRole
}

type Metadata interface {
	ImpactsAuthorization() bool
}

type Session struct {
	// Principal is the authenticated principal.
	Principal types.Principal

	// Metadata contains auth related information (access grants, tokenId, sshKeyId, ...)
	Metadata Metadata

	// SudoUser is the external authenticated principal
	SudoUser *types.Principal

	// User is the end principal. default to Principal, override if SudoUser exist
	User *types.Principal
}

type TokenMetadata struct {
	TokenType enum.TokenType
	TokenID   int64
}