auth

type API interface {
	AuthenticateRequest(ctx context.Context) error
	AuthenticateRequestV2(ctx context.Context) (*Payload, error)
	AuthorizeGroup(ctx context.Context, allowedGroups ...string) (*Payload, error)
	AuthorizeActor(ctx context.Context, actorID string) (*Payload, error)
	AuthorizeActors(ctx context.Context, actorID ...string) (*Payload, error)
	AuthorizeActorAndGroup(ctx context.Context, actorID string, allowedGroups ...string) (*Payload, error)
	AuthorizeActorOrGroup(ctx context.Context, actorID string, allowedGroups ...string) (*Payload, error)
	AuthorizeAdmin(ctx context.Context) (*Payload, error)
	AuthorizeAdminStrict(ctx context.Context, adminID string) (*Payload, error)
	AdminGroups() []string
	AddAdminGroups(groups ...string)
	IsAdmin(group string) bool
	GenToken(ctx context.Context, payload *Payload, expires time.Time) (string, error)
	GenTokenUsingKey(ctx context.Context, claims *Claims, expires time.Time, signingKey []byte) (string, error)
	GenTokenFromClaims(ctx context.Context, claims *Claims, expires time.Time) (string, error)
	GetJwtPayload(ctx context.Context) (*Payload, error)
	GetPayloadFromJwt(jwt string) (*Payload, error)
	GetClaims(ctx context.Context) (*Claims, error)
	GetClaimsFromJwt(jwt string) (*Claims, error)
	GetMetadataFromJwt(jwt string) (metadata.MD, error)
	GetMetadataFromCtx(ctx context.Context) (metadata.MD, error)
	AuthorizeFunc(ctx context.Context) (context.Context, error)
}

type Claims struct {
	*Payload
	jwt.StandardClaims
}

type Options struct {
	SigningMethod    jwt.SigningMethod
	SigningKey       []byte
	OtherSigningKeys [][]byte
	Issuer           string
	Audience         string
	AdminsGroup      []string
}

type Payload struct {
	ID           string
	ProjectID    string
	Names        string
	PhoneNumber  string
	EmailAddress string
	Group        string
	Roles        []string
}