auth

type AgentToken struct {
	ID           string
	CreatedAt    time.Time
	Token        string
	Description  string
	Organization string
}

type AgentTokenService interface {
	CreateAgentToken(ctx context.Context, options CreateAgentTokenOptions) (*AgentToken, error)
	// GetAgentToken retrieves an agent token using the given token.
	GetAgentToken(ctx context.Context, token string) (*AgentToken, error)
	ListAgentTokens(ctx context.Context, organization string) ([]*AgentToken, error)
	DeleteAgentToken(ctx context.Context, id string) (*AgentToken, error)
}

type AuthService interface {
	AgentTokenService
	RegistrySessionService

	TeamService

	UserService

	StartExpirer(context.Context)
	// contains filtered or unexported methods
}

type AuthenticateSessionService interface {
	GetSession(ctx context.Context, token string) (*Session, error)
	GetUser(context.Context, UserSpec) (*User, error)
}

type AuthenticateTokenService interface {
	GetAgentToken(context.Context, string) (*AgentToken, error)
	GetRegistrySession(context.Context, string) (*RegistrySession, error)
	GetUser(ctx context.Context, spec UserSpec) (*User, error)
}

type Client struct {
	otf.JSONAPIClient
}

type CreateAgentTokenOptions struct {
	Organization string `schema:"organization_name,required"`
	Description  string `schema:"description,required"`
}

type CreateRegistrySessionOptions struct {
	Organization *string    // required organization
	Expiry       *time.Time // optionally override expiry
}

type CreateSessionOptions struct {
	Request  *http.Request
	Username *string
	Expiry   *time.Time
}

type NewTeamOptions struct {
	Name         string `schema:"team_name,required"`
	Organization string `schema:"organization_name,required"`
}

type NewUserOption func(*User)

type OAuthClient struct {
	otf.HostnameService // for retrieving otf system hostname for use in redirects back to otf

	*oauth2.Config
	// contains filtered or unexported fields
}

type OAuthClientConfig struct {
	cloud.CloudOAuthConfig
	// contains filtered or unexported fields
}

type Options struct {
	Configs   []cloud.CloudOAuthConfig
	SiteToken string

	OrganizationService
	otf.DB
	otf.Renderer
	otf.HostnameService
	logr.Logger
}

type OrganizationAccess struct {
	ManageWorkspaces bool `schema:"manage_workspaces"` // admin access on all workspaces
	ManageVCS        bool `schema:"manage_vcs"`        // manage VCS providers
	ManageRegistry   bool `schema:"manage_registry"`   // manage module and provider registry
}

type OrganizationService organization.Service

type RegistrySession struct {
	Token        string
	Expiry       time.Time
	Organization string
}

type RegistrySessionService interface {
	CreateRegistrySession(ctx context.Context, opts CreateRegistrySessionOptions) (*RegistrySession, error)
	// GetRegistrySession retrieves a registry session using a token. Intended
	// as means of checking whether a given token is valid.
	GetRegistrySession(ctx context.Context, token string) (*RegistrySession, error)
}

type Session struct {
	// contains filtered or unexported fields
}

type Team struct {
	ID           string
	CreatedAt    time.Time
	Name         string
	Organization string

	Access OrganizationAccess
}

type TeamService interface {
	CreateTeam(ctx context.Context, opts NewTeamOptions) (*Team, error)
	GetTeam(ctx context.Context, organization, team string) (*Team, error)
	GetTeamByID(ctx context.Context, teamID string) (*Team, error)
	ListTeams(ctx context.Context, organization string) ([]*Team, error)
	ListTeamMembers(ctx context.Context, teamID string) ([]*User, error)
	UpdateTeam(ctx context.Context, teamID string, opts UpdateTeamOptions) (*Team, error)
	DeleteTeam(ctx context.Context, teamID string) error
}

type Token struct {
	ID          string
	CreatedAt   time.Time
	Token       string
	Description string
	Username    string // Token belongs to a user
}

type TokenCreateOptions struct {
	Description string
}

type TokenService interface {
	// CreateToken creates a user token.
	CreateToken(ctx context.Context, username string, opts *TokenCreateOptions) (*Token, error)
	// ListTokens lists API tokens for a user
	ListTokens(ctx context.Context, username string) ([]*Token, error)
	// DeleteToken deletes a user token.
	DeleteToken(ctx context.Context, username string, tokenID string) error
}

type TokenStore interface {
	// CreateToken creates a user token.
	CreateToken(ctx context.Context, token *Token) error
	// ListTokens lists user tokens.
	ListTokens(ctx context.Context, userID string) ([]*Token, error)
	// DeleteToken deletes a user token.
	DeleteToken(ctx context.Context, id string) error
}

type UpdateTeamOptions struct {
	OrganizationAccess
}

type User struct {
	ID            string // ID uniquely identifies users
	CreatedAt     time.Time
	UpdatedAt     time.Time
	Username      string   // username is globally unique
	Organizations []string // user belongs to many organizations
	Teams         []*Team  // user belongs to many teams
}

type UserListOptions struct {
	Organization *string
	TeamName     *string
}

type UserService interface {
	CreateUser(ctx context.Context, username string, opts ...NewUserOption) (*User, error)
	GetUser(ctx context.Context, spec UserSpec) (*User, error)
	ListUsers(ctx context.Context, organization string) ([]*User, error)
	DeleteUser(ctx context.Context, username string) error
	AddOrganizationMembership(ctx context.Context, username, organization string) error
	RemoveOrganizationMembership(ctx context.Context, username, organization string) error
	AddTeamMembership(ctx context.Context, username, teamID string) error
	RemoveTeamMembership(ctx context.Context, username, teamID string) error
	// contains filtered or unexported methods
}

type UserSpec struct {
	UserID              *string
	Username            *string
	SessionToken        *string
	AuthenticationToken *string
}