accessgate

type AgentEnvelopeVerifier interface {
	VerifyAgentEnvelope(ctx context.Context, request AgentRequest) (Principal, error)
}

type AgentRequest struct {
	Method   string
	Target   string
	Envelope string
}

type AppPassVerifier interface {
	VerifyAppPass(ctx context.Context, host, pass string) (Principal, error)
}

type BrowserLauncher interface {
	// LaunchURL is the Hub page a browser without a session is sent to.
	LaunchURL(target, state string) (string, error)
	// CompleteLaunch admits a launch proof and returns the session value and
	// its lifetime: four hours when the launch came through the LAN
	// listener (Home), one hour otherwise.
	CompleteLaunch(ctx context.Context, launch LaunchRequest) (string, time.Duration, error)
}

type BrowserSessionVerifier interface {
	VerifyBrowserSession(ctx context.Context, host string, request *http.Request) (Principal, error)
}

type Decision struct {
	Allow    bool
	Status   int
	Reason   string
	Headers  http.Header
	Redirect string
	Cookies  []*http.Cookie
}

type DeviceProof struct {
	Method      string
	RouteOrigin string
	Path        string
	Header      http.Header
}

type DeviceProofVerifier interface {
	VerifyDeviceProof(ctx context.Context, proof DeviceProof) (Principal, error)
}

type Gate struct {
	// contains filtered or unexported fields
}

type LaunchRequest struct {
	Host       string
	Credential string
	Proof      string
	State      string
	Target     string
	Home       bool
}

type Options struct {
	Devices   DeviceProofVerifier
	Browsers  BrowserSessionVerifier
	Launcher  BrowserLauncher
	AppPasses AppPassVerifier
	Agents    AgentEnvelopeVerifier
	Now       func() time.Time
}

type PinnedGatewayKeyMissing struct{}

type Principal struct {
	Subject     string
	Device      string
	Groups      []string
	GroupsKnown bool
	ExpiresAt   time.Time
}

type RateLimit = accessgatetable.RateLimit

type Request struct {
	Listener string
	Method   string
	Host     string
	URI      string
	Header   http.Header
	HTTP     *http.Request
}

type Route = accessgatetable.Route

type Table = accessgatetable.Table