model

type Action struct {
	ID        string    `json:"id" gorm:"primarykey"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type Attribute struct {
	ID    int    `json:"-" gorm:"primarykey"`
	Key   string `json:"key" gorm:"column:key_name"`
	Value string `json:"value"`
}

type Attributes []*Attribute

type Audit struct {
	ID            int64     `json:"id" gorm:"primarykey;autoIncrement"`
	Date          time.Time `json:"date"`
	Principal     string    `json:"principal"`
	ResourceKind  string    `json:"resource_kind"`
	ResourceValue string    `json:"resource_value"`
	Action        string    `json:"action"`
	IsAllowed     bool      `json:"is_allowed"`
	PolicyID      string    `json:"policy_id"`
}

type Client struct {
	ID        string    `json:"client_id" gorm:"primarykey"`
	Secret    string    `json:"client_secret" gorm:"type:varchar(512)"`
	Name      string    `json:"name"`
	Domain    string    `json:"domain" gorm:"type:varchar(512)"`
	Data      string    `json:"data,omitempty" gorm:"type:text"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type CompiledPolicy struct {
	PolicyID      string    `json:"policy_id" gorm:"index"`
	PrincipalID   string    `json:"principal_id" gorm:"index"`
	ResourceKind  string    `json:"resource_kind" gorm:"index"`
	ResourceValue string    `json:"resource_value" gorm:"index"`
	ActionID      string    `json:"action_id" gorm:"index"`
	Version       int64     `json:"version" gorm:"index"`
	CreatedAt     time.Time `json:"created_at"`
	UpdatedAt     time.Time `json:"updated_at"`
}

type Models interface {
	Action | Audit | Attribute | Client | CompiledPolicy | Policy | Principal | Resource | Role | Stats | Token | User
}

type Policy struct {
	ID             string                       `json:"id" gorm:"primarykey"`
	Resources      []*Resource                  `json:"resources,omitempty" gorm:"many2many:authz_policies_resources;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
	Actions        []*Action                    `json:"actions,omitempty" gorm:"many2many:authz_policies_actions;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
	AttributeRules datatypes.JSONType[[]string] `json:"attribute_rules,omitempty" swaggertype:"object"`
	CreatedAt      time.Time                    `json:"created_at"`
	UpdatedAt      time.Time                    `json:"updated_at"`

	Roles []*Role `json:"-" gorm:"many2many:authz_roles_policies"`
}

type Principal struct {
	ID         string     `json:"id" gorm:"primarykey"`
	Roles      []*Role    `json:"roles,omitempty" gorm:"many2many:authz_principals_roles;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
	Attributes Attributes `json:"attributes,omitempty" gorm:"many2many:authz_principals_attributes;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
	IsLocked   bool       `json:"is_locked" gorm:"is_locked"`
	CreatedAt  time.Time  `json:"created_at"`
	UpdatedAt  time.Time  `json:"updated_at"`
}

type Resource struct {
	ID         string     `json:"id" gorm:"primarykey"`
	Kind       string     `json:"kind" gorm:"kind"`
	Value      string     `json:"value" gorm:"value"`
	Attributes Attributes `json:"attributes,omitempty" gorm:"many2many:authz_resources_attributes;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
	IsLocked   bool       `json:"is_locked" gorm:"is_locked"`
	CreatedAt  time.Time  `json:"created_at"`
	UpdatedAt  time.Time  `json:"updated_at"`
}

type Role struct {
	ID        string    `json:"id" gorm:"primarykey"`
	Policies  []*Policy `json:"policies,omitempty" gorm:"many2many:authz_roles_policies;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`

	Principals []*Principal `json:"-" gorm:"many2many:authz_principals_roles;constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
}

type Stats struct {
	ID                  string    `json:"id" gorm:"primarykey"`
	Date                time.Time `json:"date" gorm:"date"`
	ChecksAllowedNumber int64     `json:"checks_allowed_number" gorm:"checks_allowed_number"`
	ChecksDeniedNumber  int64     `json:"checks_denied_number" gorm:"checks_denied_number"`
}

type Token struct {
	ID        uint   `gorm:"primarykey"`
	Code      string `gorm:"type:varchar(512)"`
	Access    string `gorm:"type:varchar(512)"`
	Refresh   string `gorm:"type:varchar(512)"`
	Data      string `gorm:"type:text"`
	ExpiredAt int64
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type User struct {
	Username     string    `json:"username" gorm:"primarykey"`
	PasswordHash string    `json:"-" gorm:"password_hash"`
	Password     string    `json:"password,omitempty" gorm:"-"` // Only used to display generated password after creation
	CreatedAt    time.Time `json:"created_at"`
	UpdatedAt    time.Time `json:"updated_at"`
}