auth

type AuthRequest struct {
	Username string   `json:"username,omitempty"`
	Password string   `json:"password,omitempty"`
	Scope    string   `json:"scope,omitempty"`
	Service  string   `json:"service,omitempty"`
	Type     AuthType `json:"type,omitempty"`
}

type AuthService interface {
	Authenticate(ctx context.Context, req AuthRequest) (interface{}, error)
	ValidateToken(ctx context.Context, token string) (*Claims, error)
	RefreshToken(ctx context.Context, refreshToken string) (*WebAuthResponse, error)
	RevokeToken(ctx context.Context, token string) error
	GetPermissions(ctx context.Context, subject string) ([]models.Permission, error)
	HasPermission(ctx context.Context, subject string, perm models.Permission) bool
}

type AuthType string

type Claims struct {
	// STANDARD CLAIM
	Subject      string           `json:"sub"`
	Audience     string           `json:"aud"`
	ExpiresAt    *jwt.NumericDate `json:"exp"`
	IssuedAt     *jwt.NumericDate `json:"iat"`
	NotBefore    *jwt.NumericDate `json:"nbf,omitempty"`
	Issuer       string           `json:"iss"`
	JwtID        string           `json:"jti,omitempty"`
	AllowReissue bool             `json:"allow_reissue,omitempty"`

	// REGISTRY CLAIM
	Access []models.ResourceActions `json:"access"`
}

type Middleware struct {
	// contains filtered or unexported fields
}

type RegAuthResponse struct {
	AccessToken string    `json:"access_token"`
	ExpiresIn   int       `json:"expires_in"`
	IssuedAt    time.Time `json:"issued_at"`
	TokenType   string    `json:"token_type"`
}

type TokenManager struct {
	// contains filtered or unexported fields
}

type WebAuthResponse struct {
	Token     string    `json:"token,omitempty"`
	ExpiresIn int       `json:"expires_in,omitempty"`
	IssuedAt  time.Time `json:"issued_at,omitempty"`
	Username  string    `json:"username,omitempty"`
	Groups    []string  `json:"groups,omitempty"`
}