auth

type Agent struct {
	ID string
}

type AuthProvider interface {
	Authenticate(ctx context.Context, reqHeaders http.Header, query url.Values) (Session, error)
	// add auth to upstream requests of a session for upstream service account.
	UpstreamAuth(r *http.Request, session Session, upstreamPrincipal Principal) error
}

type Authorizer interface {
	Check(ctx context.Context, principal Principal, verb Verb, resource Resource) error
}

type Principal struct {
	User  User
	Agent Agent
}

type Resource struct {
	Name string
	Type string
}

type Session interface {
	Principal() Principal
}

type User struct {
	ID    string
	Roles []string
}

type Verb string