auth

type AuditEvent struct {
	Action             string
	Outcome            string
	Reason             string
	StatusCode         int
	Path               string
	Resource           string
	ResourceAction     string
	Scope              string
	Provider           string
	RequiredPermission Permission
	KeyID              string
	OrgID              string
	WorkspaceID        string
	LimitCode          string
}

type AuditRecorder func(r *http.Request, event AuditEvent)

type AuthorizationRule struct {
	Resource   string
	Action     string
	Scope      string
	Permission Permission
	Methods    []string
	Path       string
	Public     bool
}

type Authorizer struct {
	// contains filtered or unexported fields
}

type AuthorizerResolver func(r *http.Request) (*Authorizer, error)

type Identity struct {
	KeyID       string
	OrgID       string
	WorkspaceID string
	Team        string
	Role        string
	// contains filtered or unexported fields
}

type KeyConfig struct {
	ID          string
	Token       string
	TokenHash   string
	OrgID       string
	WorkspaceID string
	Team        string
	Role        string
	Permissions []string
}

type MiddlewareOptions struct {
	APIPrefix          string
	OpenAIPrefix       string
	AnthropicPrefix    string
	ProxyLimiter       ProxyLimiter
	ProxyUsageRecorder ProxyUsageRecorder
	AuditRecorder      AuditRecorder
}

type Options struct {
	Enabled bool
	Header  string
	Keys    []KeyConfig
}

type Permission string

type ProxyLimitResult struct {
	Code              string
	Message           string
	RetryAfterSeconds int
}

type ProxyLimiter func(r *http.Request, identity *Identity) (*ProxyLimitResult, error)

type ProxyUsageRecorder func(r *http.Request, identity *Identity)