auth

type Claims struct {
	UserID      string   `json:"sub"`
	TenantID    string   `json:"tenant_id"`
	Role        string   `json:"role"`
	Permissions []string `json:"permissions,omitempty"`
	Email       string   `json:"email"`
	SessionID   string   `json:"session_id,omitempty"`
	TokenType   string   `json:"token_type"`
	jwt.RegisteredClaims
}

type JWTClaims struct {
	UserID    string `json:"user_id"`
	Email     string `json:"email"`
	Role      string `json:"role"`
	TenantID  string `json:"tenant_id"`
	SessionID string `json:"session_id"`
	jwt.RegisteredClaims
}

type JWTConfig struct {
	// Token configuration
	SecretKey       string
	TokenLookup     string // "header:Authorization,query:token,cookie:jwt"
	TokenHeadName   string // "Bearer"
	TokenExpiration time.Duration

	// Validation options
	SkipPaths      []string
	RequiredClaims []string
	AllowedIssuers []string

	// Cache configuration for token blacklist/validation
	CacheClient cache.Client
	CachePrefix string
	CacheTTL    time.Duration

	// Security options
	EnableBlacklist  bool
	MaxTokensPerUser int

	// Custom functions
	SkipperFunc  func(*gin.Context) bool
	ClaimsFunc   func(*gin.Context, *Claims)
	ErrorHandler func(*gin.Context, error)
}

type JWTMiddleware struct {
	// contains filtered or unexported fields
}

type JWTService struct {
	// contains filtered or unexported fields
}

type UserInfo struct {
	ID       string
	Email    string
	Role     string
	TenantID string
}