mediator

type APIKeyMedConfig struct {
	// Repos (required) is the repository factory for API key persistence.
	Repos domain.RepoFactory

	// Pepper (required) is the pepper mixed into API key hashes.
	Pepper []byte

	// CoreClient (required) is the core-service client used to resolve accounts.
	CoreClient domain.AuthCoreClient
}

type DocAPIKeyMedConfig struct {
	// Repos (required) is the repository factory for doc API key persistence.
	Repos domain.RepoFactory

	// EncryptionKey (required) encrypts doc API keys at rest.
	EncryptionKey []byte

	// CoreClient (required) is the core-service client used to resolve accounts.
	CoreClient domain.AuthCoreClient

	// APIKeyMed (required) manages the underlying API keys.
	APIKeyMed domain.APIKeyMed
}

type IdempotencyMedConfig struct {
	// Repos (required) is the repository factory for idempotency persistence.
	Repos domain.RepoFactory
}

type MediatorFactoryConfig struct {
	// JWTSecret (required) signs and verifies JWT access tokens.
	JWTSecret string // #nosec G117 - Struct field, not a hardcoded credential

	// APIKeyPepper (required) is the pepper mixed into API key hashes.
	APIKeyPepper []byte

	// NotificationPublisher (required) publishes notification messages to the outbox.
	NotificationPublisher domain.NotificationPublisher

	// FrontendURL (required) is the dashboard base URL used in emails and redirects.
	FrontendURL string

	// CoreClient (required) is the core-service client used by the mediators.
	CoreClient domain.AuthCoreClient

	// DocAPIKeyEncryptionKey (optional; default: nil) encrypts doc API keys at rest. When empty, the doc API key mediator is not constructed.
	DocAPIKeyEncryptionKey []byte
}

type PasswordMedConfig struct {
	// Repos (required) is the repository factory for credential persistence.
	Repos domain.RepoFactory

	// RefreshTokenMed (required) revokes refresh tokens on password changes.
	RefreshTokenMed domain.RefreshTokenMed

	// JWTSecret (required) signs and verifies password-flow JWTs.
	JWTSecret string // #nosec G117 - Struct field, not a hardcoded credential

	// NotificationPublisher (required) publishes notification messages to the outbox.
	NotificationPublisher domain.NotificationPublisher

	// FrontendURL (required) is the dashboard base URL used in password emails.
	FrontendURL string
}

type RefreshTokenMedConfig struct {
	// Repos (required) is the repository factory for refresh token persistence.
	Repos domain.RepoFactory
}

type RegistrationMedConfig struct {
	// Repos (required) is the repository factory for registration persistence.
	Repos domain.RepoFactory

	// NotificationPublisher (required) publishes notification messages to the outbox.
	NotificationPublisher domain.NotificationPublisher

	// FrontendURL (required) is the dashboard base URL used in registration emails.
	FrontendURL string

	// UserMed (required) creates and manages users during registration.
	UserMed domain.UserMed

	// RefreshTokenMed (required) issues refresh tokens on successful registration.
	RefreshTokenMed domain.RefreshTokenMed
}

type UserMedConfig struct {
	// Repos (required) is the repository factory for user persistence.
	Repos domain.RepoFactory

	// JWTSecret (required) signs and verifies user-flow JWTs.
	JWTSecret string // #nosec G117 - Struct field, not a hardcoded credential

	// FrontendURL (required) is the dashboard base URL used in user emails.
	FrontendURL string

	// RefreshTokenMed (required) manages refresh tokens for user sessions.
	RefreshTokenMed domain.RefreshTokenMed

	// APIKeyMed (required) manages the user's API keys.
	APIKeyMed domain.APIKeyMed

	// CoreClient (required) is the core-service client used to resolve accounts.
	CoreClient domain.AuthCoreClient

	// NotificationPublisher (required) publishes notification messages to the outbox.
	NotificationPublisher domain.NotificationPublisher
}