passkey

type AuthTransaction struct {
	database.BaseModel

	Kind        string     `json:"kind" gorm:"column:kind;not null;index"`
	UserID      string     `json:"userId" gorm:"column:user_id;not null;index"`
	SessionID   *string    `json:"sessionId,omitempty" gorm:"column:session_id;index"`
	Source      string     `json:"source" gorm:"column:source;not null"`
	UserAgent   *string    `json:"-" gorm:"column:user_agent"`
	IPAddress   *string    `json:"-" gorm:"column:ip_address"`
	SecretHash  *string    `json:"-" gorm:"column:secret_hash;index"`
	Status      string     `json:"status" gorm:"column:status;not null;index"`
	ExpiresAt   time.Time  `json:"expiresAt" gorm:"column:expires_at;not null;index"`
	CompletedAt *time.Time `json:"completedAt,omitempty" gorm:"column:completed_at"`
}

type AuthenticationCompletion struct {
	User   *userdomain.User
	Meta   auth.SessionMeta
	Source string
}

type BeginPasskeyRegistrationInput struct {
	StepUpToken string `header:"X-Step-Up-Token"`
}

type BeginStepUpInput struct{}

type DeletePasskeyInput struct {
	ID          string `path:"id"`
	StepUpToken string `header:"X-Step-Up-Token"`
}

type FinishPasskeyRegistrationInput struct {
	UserAgent string `header:"User-Agent"`
	Body      passkeyCredentialBody
}

type FinishStepUpInput struct {
	Body stepUpFinishBody
}

type MFASettingsInput struct {
	StepUpToken string `header:"X-Step-Up-Token"`
}

type MFAStatus struct {
	Enabled                bool `json:"enabled"`
	PasskeyCount           int  `json:"passkeyCount"`
	RecoveryCodesRemaining int  `json:"recoveryCodesRemaining"`
}

type MobilePasskeyExchangeInput struct {
	UserAgent string `header:"User-Agent"`
	Body      mobilePasskeyExchangeBody
}

type MobilePasskeyExchangeOutput struct {
	Body base.ApiResponse[authtypes.AuthenticationResponse]
}

type MobilePasskeyFinishInput struct {
	Body mobilePasskeyFinishBody
}

type Passkey struct {
	database.BaseModel

	UserID string     `json:"userId" gorm:"column:user_id;not null;index"`
	User   *user.User `json:"-" gorm:"foreignKey:UserID;constraint:OnDelete:CASCADE"`

	RPID                    string               `json:"rpId" gorm:"column:rp_id;not null"`
	CredentialID            []byte               `json:"-" gorm:"column:credential_id;not null"`
	PublicKey               []byte               `json:"-" gorm:"column:public_key;not null"`
	AttestationType         string               `json:"attestationType,omitempty" gorm:"column:attestation_type"`
	AttestationFormat       string               `json:"attestationFormat,omitempty" gorm:"column:attestation_format"`
	Transports              database.StringSlice `json:"transports,omitempty" gorm:"column:transports;type:text"`
	AAGUID                  []byte               `json:"-" gorm:"column:aaguid"`
	SignCount               uint32               `json:"signCount" gorm:"column:sign_count;not null;default:0"`
	BackupEligible          bool                 `json:"backupEligible" gorm:"column:backup_eligible;not null;default:false"`
	BackupState             bool                 `json:"backupState" gorm:"column:backup_state;not null;default:false"`
	CloneWarning            bool                 `json:"cloneWarning" gorm:"column:clone_warning;not null;default:false"`
	AuthenticatorAttachment string               `json:"authenticatorAttachment,omitempty" gorm:"column:authenticator_attachment"`

	AttestationClientDataJSON     []byte `json:"-" gorm:"column:attestation_client_data_json"`
	AttestationClientDataHash     []byte `json:"-" gorm:"column:attestation_client_data_hash"`
	AttestationAuthenticatorData  []byte `json:"-" gorm:"column:attestation_authenticator_data"`
	AttestationPublicKeyAlgorithm int64  `json:"-" gorm:"column:attestation_public_key_algorithm"`
	AttestationObject             []byte `json:"-" gorm:"column:attestation_object"`

	Name       string     `json:"name" gorm:"column:name;not null"`
	LastUsedAt *time.Time `json:"lastUsedAt,omitempty" gorm:"column:last_used_at"`
}

type PasskeyCapabilities struct {
	PasskeyMFAEnabled          bool `json:"passkeyMfaEnabled"`
	PasskeyCount               int  `json:"passkeyCount"`
	HasLocalPassword           bool `json:"hasLocalPassword"`
	HasOIDCFallback            bool `json:"hasOidcFallback"`
	CanEnrollWithActiveSession bool `json:"canEnrollWithActiveSession"`
	CanDeleteLastPasskey       bool `json:"canDeleteLastPasskey"`
	RequiresStepUp             bool `json:"requiresStepUp"`
}

type PasskeyCeremony struct {
	database.BaseModel

	Purpose           string     `json:"purpose" gorm:"column:purpose;not null;index"`
	UserID            *string    `json:"userId,omitempty" gorm:"column:user_id;index"`
	SessionID         *string    `json:"sessionId,omitempty" gorm:"column:session_id;index"`
	AuthTransactionID *string    `json:"authTransactionId,omitempty" gorm:"column:auth_transaction_id;index"`
	RPID              string     `json:"rpId" gorm:"column:rp_id;not null"`
	SessionData       string     `json:"-" gorm:"column:session_data;type:text;not null"`
	ExpiresAt         time.Time  `json:"expiresAt" gorm:"column:expires_at;not null;index"`
	ConsumedAt        *time.Time `json:"-" gorm:"column:consumed_at;index"`
}

type PasskeyChallenge struct {
	CeremonyID    string
	TransactionID string
	Options       any
	ExpiresAt     time.Time
}

type PasskeyHandler struct {
	// contains filtered or unexported fields
}

type PasskeyLoginFinishInput struct {
	UserAgent string `header:"User-Agent"`
	Body      passkeyCredentialBody
}

type PasskeyLoginFinishOutput struct {
	SetCookie []string `header:"Set-Cookie" doc:"Session cookie"`
	Body      base.ApiResponse[authtypes.AuthenticationResponse]
}

type PasskeyMFAFinishInput struct {
	Body mfaFinishBody
}

type PasskeyMFAFinishOutput struct {
	SetCookie []string `header:"Set-Cookie" doc:"Session cookie"`
	Body      base.ApiResponse[authtypes.AuthenticationResponse]
}

type PasskeyMFAStartInput struct {
	Body mfaBeginBody
}

type PasskeyRecoveryCode struct {
	database.BaseModel

	UserID   string     `json:"userId" gorm:"column:user_id;not null;index"`
	CodeHash string     `json:"-" gorm:"column:code_hash;not null;uniqueIndex"`
	UsedAt   *time.Time `json:"usedAt,omitempty" gorm:"column:used_at;index"`
}

type PasskeyRecoveryInput struct {
	Body recoveryBody
}

type PasskeyRecoveryOutput struct {
	SetCookie []string `header:"Set-Cookie" doc:"Session cookie"`
	Body      base.ApiResponse[authtypes.AuthenticationResponse]
}

type PasskeyService struct {
	// contains filtered or unexported fields
}

type PasskeySummary struct {
	ID                      string     `json:"id"`
	Name                    string     `json:"name"`
	RPID                    string     `json:"rpId"`
	AAGUID                  string     `json:"aaguid,omitempty"`
	Transports              []string   `json:"transports,omitempty"`
	BackupEligible          bool       `json:"backupEligible"`
	BackupState             bool       `json:"backupState"`
	CloneWarning            bool       `json:"cloneWarning"`
	AuthenticatorAttachment string     `json:"authenticatorAttachment,omitempty"`
	CreatedAt               time.Time  `json:"createdAt"`
	UpdatedAt               *time.Time `json:"updatedAt,omitempty"`
	LastUsedAt              *time.Time `json:"lastUsedAt,omitempty"`
}

type PasswordStepUpInput struct {
	Body passwordReauthBody
}

type RecoveryCodesResponse struct {
	Codes []string `json:"codes" doc:"Recovery codes; shown only once"`
}

type RenamePasskeyInput struct {
	ID          string `path:"id"`
	StepUpToken string `header:"X-Step-Up-Token"`
	Body        renamePasskeyBody
}

type StepUpGrant struct {
	Token     string    `json:"token"`
	ExpiresAt time.Time `json:"expiresAt"`
}