management

type AuthConfig struct {
	// Password is a simple bearer token. Empty means disabled.
	Password string `yaml:"password"` //nolint:gosec // configuration field name is intentional.
	// GitHub holds GitHub OAuth configuration. Nil means disabled.
	GitHub *GitHubConfig `yaml:"github"`
}

type BaseConfigProvider interface {
	GetBaseConfig(modelID string) (json.RawMessage, error)
}

type Config struct {
	Enabled bool       `yaml:"enabled"`
	Auth    AuthConfig `yaml:"auth"`
}

type FrontendConfig struct {
	ManagementEnabled bool     `json:"managementEnabled"`
	AuthMethods       []string `json:"authMethods"`
}

type GitHubConfig struct {
	ClientID     string        `yaml:"client_id"`
	ClientSecret string        `yaml:"client_secret"` //nolint:gosec // configuration field name is intentional.
	CallbackURL  string        `yaml:"callback_url"`
	Org          string        `yaml:"org"`
	AllowedUsers []string      `yaml:"allowed_users"`
	SessionTTL   time.Duration `yaml:"session_ttl"`
}

type GitHubHandler struct {
	// contains filtered or unexported fields
}

type Handlers struct {
	// contains filtered or unexported fields
}

type Service interface {
	// RegisterRoutes registers management routes on the given router.
	RegisterRoutes(router fiber.Router)
	// GetFrontendConfig returns the configuration to inject into the frontend.
	GetFrontendConfig() FrontendConfig
	// SetBaseConfigProvider sets the provider for original config snapshots.
	SetBaseConfigProvider(p BaseConfigProvider)
}

type SessionData struct {
	Username  string `json:"username"`
	AuthMode  string `json:"auth_mode"`
	CreatedAt int64  `json:"created_at"`
}

type SessionStore struct {
	// contains filtered or unexported fields
}