identity

type Issuer struct {
	// Type of the issuer (OIDC, AAP, K8s, etc.)
	Type string `json:"type"`

	// ID of the issuer (e.g., OIDC issuer URL, K8s cluster name, AAP instance ID)
	ID string `json:"id"`
}

type MappedIdentity struct {
	// Organizations the user belongs to (mapped from external identity)
	Organizations []*orgmodel.Organization `json:"organizations"`

	// OrgRoles maps organization ID to roles for that organization
	OrgRoles map[string][]string `json:"org_roles"`

	// SuperAdmin indicates if the user has the global flightctl-admin role
	SuperAdmin bool `json:"is_super_admin"`

	// Original username and UID for reference
	Username string `json:"username"`
	UID      string `json:"uid"`

	// Issuer that produced this identity (OIDC, AAP, K8s, etc.)
	Issuer *Issuer `json:"issuer"`
}

type OrganizationRoles struct {
	Organization *orgmodel.Organization
	Roles        []string
}