auth

type Claims struct {
	UserID      string   `json:"sub"`
	TenantID    string   `json:"tenant_id"`
	Role        string   `json:"role"`
	Permissions []string `json:"permissions,omitempty"`
	Email       string   `json:"email"`
	SessionID   string   `json:"session_id,omitempty"`
	TokenType   string   `json:"token_type"`
	jwt.RegisteredClaims
}

type JWTConfig struct {
	// Token configuration
	SecretKey       string
	TokenLookup     string // "header:Authorization,query:token,cookie:jwt"
	TokenHeadName   string // "Bearer"
	TokenExpiration time.Duration

	// Validation options
	SkipPaths      []string
	RequiredClaims []string
	AllowedIssuers []string

	// Cache configuration for token blacklist/validation
	CacheClient cache.CacheInterface
	CachePrefix string
	CacheTTL    time.Duration

	// Security options
	EnableBlacklist  bool
	MaxTokensPerUser int

	// Custom functions
	SkipperFunc  func(*gin.Context) bool
	ClaimsFunc   func(*gin.Context, *Claims)
	ErrorHandler func(*gin.Context, error)
}