auth

type AuthService interface {
	TeamService
	UserService
}

type Client struct {
	internal.JSONAPIClient
}

type CreateTeamOptions struct {
	// Name of team to create
	Name *string `schema:"name,required"`

	OrganizationAccessOptions

	// TFE fields that OTF does not support but persists merely to pass the
	// go-tfe integration tests
	SSOTeamID  *string
	Visibility *string
}

type NewUserOption func(*User)

type Options struct {
	*sql.DB
	html.Renderer
	internal.HostnameService
	organization.OrganizationService
	logr.Logger
}

type OrganizationAccess struct {
	ManageWorkspaces bool // admin access on all workspaces
	ManageVCS        bool // manage VCS providers
	ManageModules    bool // manage module registry

	// TFE fields that OTF does not support but persists merely to pass the
	// go-tfe integration tests
	ManageProviders       bool
	ManagePolicies        bool
	ManagePolicyOverrides bool
}

type OrganizationAccessOptions struct {
	ManageWorkspaces *bool `schema:"manage_workspaces"`
	ManageVCS        *bool `schema:"manage_vcs"`
	ManageModules    *bool `schema:"manage_modules"`

	// TFE fields that OTF does not support but persists merely to pass the
	// go-tfe integration tests
	ManageProviders       *bool
	ManagePolicies        *bool
	ManagePolicyOverrides *bool
}

type OrganizationService organization.Service

type Team struct {
	ID           string
	CreatedAt    time.Time
	Name         string
	Organization string

	Access OrganizationAccess

	// TFE fields that OTF does not support but persists merely to pass the
	// go-tfe integration tests
	Visibility string
	SSOTeamID  *string
}

type TeamMembershipOptions struct {
	Usernames []string
	TeamID    string
}

type TeamService interface {
	CreateTeam(ctx context.Context, organization string, opts CreateTeamOptions) (*Team, error)
	GetTeam(ctx context.Context, organization, team string) (*Team, error)
	GetTeamByID(ctx context.Context, teamID string) (*Team, error)
	ListTeams(ctx context.Context, organization string) ([]*Team, error)
	ListTeamMembers(ctx context.Context, teamID string) ([]*User, error)
	UpdateTeam(ctx context.Context, teamID string, opts UpdateTeamOptions) (*Team, error)
	DeleteTeam(ctx context.Context, teamID string) error
}

type UpdateTeamOptions struct {
	Name *string

	OrganizationAccessOptions

	// TFE fields that OTF does not support but persists merely to pass the
	// go-tfe integration tests
	SSOTeamID  *string
	Visibility *string
}

type User struct {
	ID        string // ID uniquely identifies users
	CreatedAt time.Time
	UpdatedAt time.Time
	Username  string  // username is globally unique
	SiteAdmin bool    // Indicates whether user is a site admin
	Teams     []*Team // user belongs to many teams
}

type UserListOptions struct {
	Organization *string
	TeamName     *string
}

type UserService interface {
	CreateUser(ctx context.Context, username string, opts ...NewUserOption) (*User, error)
	GetUser(ctx context.Context, spec UserSpec) (*User, error)
	ListUsers(ctx context.Context) ([]*User, error)
	ListOrganizationUsers(ctx context.Context, organization string) ([]*User, error)
	DeleteUser(ctx context.Context, username string) error
	AddTeamMembership(ctx context.Context, opts TeamMembershipOptions) error
	RemoveTeamMembership(ctx context.Context, opts TeamMembershipOptions) error
	SetSiteAdmins(ctx context.Context, usernames ...string) error
}

type UserSpec struct {
	UserID                *string
	Username              *string
	AuthenticationTokenID *string
}