access

type AccessControlConfig struct {
	// EnableRBAC enables role-based access control
	EnableRBAC bool `json:"enable_rbac"`

	// EnableMFA enables multi-factor authentication
	EnableMFA bool `json:"enable_mfa"`

	// MFARequiredRoles specifies roles that require MFA
	MFARequiredRoles []string `json:"mfa_required_roles"`

	// PasswordPolicy defines password requirements
	PasswordPolicy PasswordPolicy `json:"password_policy"`

	// SessionPolicy defines session management settings
	SessionPolicy SessionPolicy `json:"session_policy"`

	// AuditConfig defines audit logging settings
	AuditConfig AuditConfig `json:"audit_config"`

	// SecurityIncidentConfig defines security incident management settings
	SecurityIncidentConfig SecurityIncidentConfig `json:"security_incident_config"`

	// VulnerabilityConfig defines vulnerability management settings
	VulnerabilityConfig VulnerabilityConfig `json:"vulnerability_config"`

	// RBACConfig defines RBAC-specific settings
	RBACConfig RBACConfigSettings `json:"rbac_config"`

	// RolePermissions maps roles to their permissions
	RolePermissions map[string][]string `json:"role_permissions,omitempty"`
}

type AccessControlIntegration struct {
	// contains filtered or unexported fields
}

type AccessControlManager struct {
	// contains filtered or unexported fields
}

type AccessControlSystem struct {
	// contains filtered or unexported fields
}

type AccessControlSystemImpl struct {
	// contains filtered or unexported fields
}

type AuditAction string

type AuditConfig struct {
	EnabledSeverities []AuditSeverity `json:"enabled_severities"`
	LogFilePath       string          `json:"log_file_path"`
	RetentionDays     int             `json:"retention_days"`
}

type AuditEventFilter struct {
	UserID        string `json:"user_id,omitempty"`
	Action        string `json:"action,omitempty"`
	Resource      string `json:"resource,omitempty"`
	ResourceID    string `json:"resource_id,omitempty"`
	Severity      string `json:"severity,omitempty"`
	IPAddress     string `json:"ip_address,omitempty"`
	CreatedAfter  string `json:"created_after,omitempty"`
	CreatedBefore string `json:"created_before,omitempty"`
	SortBy        string `json:"sort_by,omitempty"`
	SortOrder     string `json:"sort_order,omitempty"`
	Offset        int    `json:"offset,omitempty"`
	Limit         int    `json:"limit,omitempty"`
}

type AuditLog struct {
	ID          string                 `json:"id,omitempty"`
	Timestamp   time.Time              `json:"timestamp"`
	UserID      string                 `json:"user_id,omitempty"`
	Username    string                 `json:"username,omitempty"`
	Action      AuditAction            `json:"action"`
	Resource    string                 `json:"resource"`
	ResourceID  string                 `json:"resource_id,omitempty"`
	Description string                 `json:"description"`
	IPAddress   string                 `json:"ip_address,omitempty"`
	UserAgent   string                 `json:"user_agent,omitempty"`
	Severity    AuditSeverity          `json:"severity"`
	Status      string                 `json:"status"`
	SessionID   string                 `json:"session_id,omitempty"`
	Metadata    map[string]interface{} `json:"metadata,omitempty"`
	Changes     map[string]interface{} `json:"changes,omitempty"`
}

type AuditLogFilter struct {
	UserID     string        `json:"user_id,omitempty"`
	Username   string        `json:"username,omitempty"`
	Action     AuditAction   `json:"action,omitempty"`
	Resource   string        `json:"resource,omitempty"`
	ResourceID string        `json:"resource_id,omitempty"`
	IPAddress  string        `json:"ip_address,omitempty"`
	Severity   AuditSeverity `json:"severity,omitempty"`
	Status     string        `json:"status,omitempty"`
	SessionID  string        `json:"session_id,omitempty"`
	StartTime  time.Time     `json:"start_time,omitempty"`
	EndTime    time.Time     `json:"end_time,omitempty"`
	Limit      int           `json:"limit,omitempty"`
	Offset     int           `json:"offset,omitempty"`
}

type AuditLogger interface {
	// Initialize initializes the audit logger
	Initialize(ctx context.Context) error

	// LogAudit logs an audit event
	LogAudit(ctx context.Context, log *AuditLog) error

	// GetAuditLogs retrieves audit logs
	GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*AuditLog, int, error)

	// GetAuditLogByID retrieves an audit log by ID
	GetAuditLogByID(ctx context.Context, id string) (*AuditLog, error)

	// Close closes the logger
	Close(ctx context.Context) error
}

type AuditLoggerConfig struct {
	// Logging configuration
	LogToConsole bool
	LogToFile    bool
	LogFile      string
	LogFormat    string

	// Retention configuration
	RetentionDays int
}

type AuditLoggerImpl struct {
	// contains filtered or unexported fields
}

type AuditManager struct {
	// contains filtered or unexported fields
}

type AuditSeverity string

type AuditStore interface {
	// StoreAuditLog stores an audit log
	StoreAuditLog(ctx context.Context, log *models.AuditLog) error

	// GetAuditLog retrieves an audit log by ID
	GetAuditLog(ctx context.Context, id string) (*models.AuditLog, error)

	// GetAuditLogs retrieves audit logs with optional filtering
	GetAuditLogs(ctx context.Context, filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

	// DeleteAuditLog deletes an audit log
	DeleteAuditLog(ctx context.Context, id string) error

	// DeleteAuditLogsBefore deletes audit logs before a specific time
	DeleteAuditLogsBefore(ctx context.Context, before time.Time) (int, error)

	// Close closes the audit store
	Close() error
}

type AuthConfig struct {
	// Session configuration
	SessionTimeout     time.Duration
	SessionMaxInactive time.Duration

	// Password configuration
	PasswordMinLength      int
	PasswordRequireUpper   bool
	PasswordRequireLower   bool
	PasswordRequireNumber  bool
	PasswordRequireSpecial bool
	PasswordMaxAge         time.Duration

	// MFA configuration
	MFAEnabled bool
	MFAMethods []string
}

type AuthManager struct {
	// contains filtered or unexported fields
}

type AuthManagerImpl struct {
	// contains filtered or unexported fields
}

type BasicInMemorySessionStore struct {
	// contains filtered or unexported fields
}

type BasicInMemoryUserStore struct {
	// contains filtered or unexported fields
}

type BasicSecurityManager struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Database configuration
	DBDriver string
	DBDSN    string

	// In-memory mode
	InMemory bool

	// Logging configuration
	LogLevel  string
	LogFormat string
	LogFile   string

	// Security configuration
	PasswordMinLength      int
	PasswordRequireUpper   bool
	PasswordRequireLower   bool
	PasswordRequireNumber  bool
	PasswordRequireSpecial bool
	PasswordMaxAge         int

	// Session configuration
	SessionTimeout     int
	SessionMaxInactive int

	// MFA configuration
	MFAEnabled bool
	MFAMethods []string
}

type ContextBoundary struct {
	Type       ContextBoundaryType
	Value      string
	Required   bool
	Validation func(ctx context.Context, value string) bool
}

type ContextBoundaryType string

type EnhancedContextBoundaryEnforcer struct {
	// contains filtered or unexported fields
}

type Factory interface {
	// CreateAccessControlSystem creates a new access control system
	CreateAccessControlSystem() (AccessControlSystem, error)

	// CreateSecurityManager creates a new security manager
	CreateSecurityManager() (SecurityManager, error)

	// CreateUserManager creates a new user manager
	CreateUserManager() (UserManager, error)

	// CreateAuthManager creates a new auth manager
	CreateAuthManager() (LegacyAuthManagerInterface, error)

	// CreateRBACManager creates a new RBAC manager
	CreateRBACManager() (RBACManager, error)

	// CreateAuditLogger creates a new audit logger
	CreateAuditLogger() (LegacyAuditLogger, error)
}

type FactoryImpl struct {
	// contains filtered or unexported fields
}

type FileAuditLogger struct {
	// contains filtered or unexported fields
}

type InMemoryAuditLogger struct {
	// contains filtered or unexported fields
}

type InMemoryAuditLoggerAdapter struct {
	// contains filtered or unexported fields
}

type InMemoryAuditLoggerWithTypes struct {
	// contains filtered or unexported fields
}

type InMemoryAuditStore struct {
	// contains filtered or unexported fields
}

type InMemoryIncidentStore struct {
	// contains filtered or unexported fields
}

type InMemoryIncidentStoreAdapter struct {
	// contains filtered or unexported fields
}

type InMemoryIncidentStoreModels struct {
	// contains filtered or unexported fields
}

type InMemoryRoleStore struct {
	// contains filtered or unexported fields
}

type InMemorySessionStore struct {
	// contains filtered or unexported fields
}

type InMemoryUserStore struct {
	// contains filtered or unexported fields
}

type InMemoryVulnerabilityStore struct {
	// contains filtered or unexported fields
}

type InMemoryVulnerabilityStoreAdapter struct {
	// contains filtered or unexported fields
}

type InMemoryVulnerabilityStoreModels struct {
	// contains filtered or unexported fields
}

type IncidentFilter struct {
	Severity      string `json:"severity,omitempty"`
	Status        string `json:"status,omitempty"`
	AssigneeID    string `json:"assignee_id,omitempty"`
	ReportedAfter string `json:"reported_after,omitempty"`
	SortBy        string `json:"sort_by,omitempty"`
	SortOrder     string `json:"sort_order,omitempty"`
	Offset        int    `json:"offset,omitempty"`
	Limit         int    `json:"limit,omitempty"`
}

type IncidentStatus string

type IncidentStore interface {
	CreateIncident(ctx context.Context, incident *SecurityIncident) error
	GetIncident(ctx context.Context, id string) (*SecurityIncident, error)
	UpdateIncident(ctx context.Context, incident *SecurityIncident) error
	DeleteIncident(ctx context.Context, id string) error
	ListIncidents(ctx context.Context, filter *LocalIncidentFilter) ([]*SecurityIncident, error)
}

type LegacyAuditLogger interface {
	// LogAudit logs an audit event
	LogAudit(log *models.AuditLog) error

	// GetAuditLogs gets audit logs
	GetAuditLogs(filter map[string]interface{}, offset, limit int) ([]*models.AuditLog, int, error)

	// Close closes the audit logger
	Close() error
}

type LegacyAuthManager struct {
	// contains filtered or unexported fields
}

type LegacyAuthManagerInterface interface {
	// Login authenticates a user
	Login(username, password string) (*models.Session, error)

	// Logout logs out a user
	Logout(sessionID string) error

	// ValidateSession validates a session
	ValidateSession(sessionID string) (*models.Session, error)

	// RefreshSession refreshes a session
	RefreshSession(sessionID string) (*models.Session, error)

	// ChangePassword changes a user's password
	ChangePassword(userID, oldPassword, newPassword string) error

	// ResetPassword resets a user's password
	ResetPassword(userID, newPassword string) error

	// Close closes the auth manager
	Close() error
}

type LocalInMemoryIncidentStore struct {
	// contains filtered or unexported fields
}

type LocalInMemoryVulnerabilityStore struct {
	// contains filtered or unexported fields
}

type LocalIncidentFilter struct {
	Severity   AuditSeverity  `json:"severity,omitempty"`
	Status     IncidentStatus `json:"status,omitempty"`
	AssignedTo string         `json:"assigned_to,omitempty"`
	ReportedBy string         `json:"reported_by,omitempty"`
	StartTime  time.Time      `json:"start_time,omitempty"`
	EndTime    time.Time      `json:"end_time,omitempty"`
	Limit      int            `json:"limit,omitempty"`
	Offset     int            `json:"offset,omitempty"`
}

type LocalVulnerabilityFilter struct {
	Severity       AuditSeverity       `json:"severity,omitempty"`
	Status         VulnerabilityStatus `json:"status,omitempty"`
	AssignedTo     string              `json:"assigned_to,omitempty"`
	ReportedBy     string              `json:"reported_by,omitempty"`
	AffectedSystem string              `json:"affected_system,omitempty"`
	CVE            string              `json:"cve,omitempty"`
	StartTime      time.Time           `json:"start_time,omitempty"`
	EndTime        time.Time           `json:"end_time,omitempty"`
	Limit          int                 `json:"limit,omitempty"`
	Offset         int                 `json:"offset,omitempty"`
}

type LoginResult struct {
	User         *models.User    `json:"user"`
	Session      *models.Session `json:"session"`
	Token        string          `json:"token,omitempty"`         // Convenience field, same as Session.Token
	RefreshToken string          `json:"refresh_token,omitempty"` // Convenience field, same as Session.RefreshToken
}

type MFAContextKey string

type MFAMiddleware struct {
	// contains filtered or unexported fields
}

type MFARequiredFunc func(r *http.Request) bool

type MFAStatus string

type MultiAuditLogger struct {
	// contains filtered or unexported fields
}

type PasswordPolicy struct {
	// MinLength is the minimum password length
	MinLength int `json:"min_length"`

	// RequireUppercase requires at least one uppercase letter
	RequireUppercase bool `json:"require_uppercase"`

	// RequireLowercase requires at least one lowercase letter
	RequireLowercase bool `json:"require_lowercase"`

	// RequireNumbers requires at least one number
	RequireNumbers bool `json:"require_numbers"`

	// RequireSpecialChars requires at least one special character
	RequireSpecialChars bool `json:"require_special_chars"`

	// MaxAge is the maximum password age in days (0 = no expiration)
	MaxAge int `json:"max_age"`

	// PreventReuseCount prevents reusing the last N passwords
	PreventReuseCount int `json:"prevent_reuse_count"`

	// LockoutThreshold is the number of failed login attempts before account lockout
	LockoutThreshold int `json:"lockout_threshold"`

	// LockoutDuration is the duration of account lockout in minutes
	LockoutDuration int `json:"lockout_duration"`
}

type Permission = string

type PersistentSessionStore interface {
	SessionStore
	Initialize(ctx context.Context) error
	CloseWithContext(ctx context.Context) error
}

type RBACConfig struct {
	DefaultRoles    []string            `json:"default_roles"`
	RolePermissions map[string][]string `json:"role_permissions"`
	RoleHierarchy   map[string][]string `json:"role_hierarchy"`
	CustomRoles     []Role              `json:"custom_roles"`
}

type RBACConfigSettings struct {
	// DefaultRoles specifies the default roles available in the system
	DefaultRoles []string `json:"default_roles"`

	// RolePermissions maps role names to their permissions
	RolePermissions map[string][]string `json:"role_permissions"`

	// StrictHierarchy enables strict role hierarchy enforcement
	StrictHierarchy bool `json:"strict_hierarchy"`

	// AllowDirectPermissions allows direct permission assignments to users
	AllowDirectPermissions bool `json:"allow_direct_permissions"`
}

type RBACManager interface {
	// HasPermission checks if a user has a permission
	HasPermission(userID string, permission string) (bool, error)

	// HasRole checks if a user has a role
	HasRole(userID string, role string) (bool, error)

	// AddRoleToUser adds a role to a user
	AddRoleToUser(userID string, role string) error

	// RemoveRoleFromUser removes a role from a user
	RemoveRoleFromUser(userID string, role string) error

	// GetUserRoles gets a user's roles
	GetUserRoles(userID string) ([]string, error)

	// GetUserPermissions gets a user's permissions
	GetUserPermissions(userID string) ([]string, error)

	// Close closes the RBAC manager
	Close() error
}

type RBACManagerAdapter struct {
	// contains filtered or unexported fields
}

type RBACManagerImpl struct {
	// contains filtered or unexported fields
}

type RequestContext interface {
	context.Context
	GetUserID() string
	GetUsername() string
	GetIPAddress() string
	GetUserAgent() string
}

type Role struct {
	ID          string    `json:"id"`
	Name        string    `json:"name"`
	Description string    `json:"description"`
	Permissions []string  `json:"permissions"`
	ParentRoles []string  `json:"parent_roles,omitempty"`
	IsBuiltIn   bool      `json:"is_built_in"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type RoleName = string

type RoleStore interface {
	// GetUserRoles gets a user's roles
	GetUserRoles(ctx context.Context, userID string) ([]string, error)

	// AddRoleToUser adds a role to a user
	AddRoleToUser(ctx context.Context, userID, role string) error

	// RemoveRoleFromUser removes a role from a user
	RemoveRoleFromUser(ctx context.Context, userID, role string) error

	// GetRolePermissions gets the permissions for a role
	GetRolePermissions(ctx context.Context, role string) ([]string, error)

	// AddPermissionToRole adds a permission to a role
	AddPermissionToRole(ctx context.Context, role, permission string) error

	// RemovePermissionFromRole removes a permission from a role
	RemovePermissionFromRole(ctx context.Context, role, permission string) error

	// GetAllRoles gets all roles
	GetAllRoles(ctx context.Context) ([]string, error)

	// GetAllPermissions gets all permissions
	GetAllPermissions(ctx context.Context) ([]string, error)
}

type SecurityConfig struct {
	// Security incident management
	IncidentNotificationEmails  []string
	IncidentEscalationThreshold common.AuditSeverity
	IncidentAutoClose           time.Duration

	// Vulnerability management
	VulnerabilityCheckPeriod        time.Duration
	VulnerabilityNotificationEmails []string
}

type SecurityIncident struct {
	ID          string                 `json:"id"`
	Title       string                 `json:"title"`
	Description string                 `json:"description"`
	Severity    AuditSeverity          `json:"severity"`
	Status      IncidentStatus         `json:"status"`
	CreatedAt   time.Time              `json:"created_at"`
	UpdatedAt   time.Time              `json:"updated_at"`
	ResolvedAt  time.Time              `json:"resolved_at,omitempty"`
	AssignedTo  string                 `json:"assigned_to,omitempty"`
	ReportedBy  string                 `json:"reported_by,omitempty"`
	AuditLogIDs []string               `json:"audit_log_ids,omitempty"`
	Metadata    map[string]interface{} `json:"metadata,omitempty"`
}

type SecurityIncidentConfig struct {
	// EnableIncidentTracking enables security incident tracking
	EnableIncidentTracking bool `json:"enable_incident_tracking"`

	// AutoCreateIncidents automatically creates incidents for high-severity events
	AutoCreateIncidents bool `json:"auto_create_incidents"`

	// NotificationEmails are email addresses to notify for security incidents
	NotificationEmails []string `json:"notification_emails"`

	// EscalationThreshold is the severity threshold for incident escalation
	EscalationThreshold AuditSeverity `json:"escalation_threshold"`

	// ResponseTimeoutMinutes is the maximum response time for incidents in minutes
	ResponseTimeoutMinutes int `json:"response_timeout_minutes"`
}

type SecurityManager interface {
	// ReportIncident reports a security incident
	ReportIncident(title, description string, severity models.SecurityIncidentSeverity) (*models.SecurityIncident, error)

	// GetIncident retrieves a security incident by ID
	GetIncident(incidentID string) (*models.SecurityIncident, error)

	// UpdateIncident updates a security incident
	UpdateIncident(incident *models.SecurityIncident) error

	// CloseIncident closes a security incident
	CloseIncident(incidentID, resolution string) error

	// ListIncidents lists security incidents
	ListIncidents(filter map[string]interface{}, offset, limit int) ([]*models.SecurityIncident, int, error)

	// ReportVulnerability reports a security vulnerability
	ReportVulnerability(title, description string, severity models.VulnerabilitySeverity) (*models.Vulnerability, error)

	// GetVulnerability retrieves a security vulnerability by ID
	GetVulnerability(vulnerabilityID string) (*models.Vulnerability, error)

	// UpdateVulnerability updates a security vulnerability
	UpdateVulnerability(vulnerability *models.Vulnerability) error

	// MitigateVulnerability marks a security vulnerability as mitigated
	MitigateVulnerability(vulnerabilityID, mitigation string) error

	// ResolveVulnerability marks a security vulnerability as resolved
	ResolveVulnerability(vulnerabilityID string) error

	// ListVulnerabilities lists security vulnerabilities
	ListVulnerabilities(filter map[string]interface{}, offset, limit int) ([]*models.Vulnerability, int, error)

	// Close closes the security manager
	Close() error
}

type SecurityManagerAdapter struct {
	// contains filtered or unexported fields
}

type Session struct {
	ID           string                 `json:"id"`
	UserID       string                 `json:"user_id"`
	Token        string                 `json:"token"`
	RefreshToken string                 `json:"refresh_token,omitempty"`
	IPAddress    string                 `json:"ip_address"`
	UserAgent    string                 `json:"user_agent"`
	ExpiresAt    time.Time              `json:"expires_at"`
	LastActivity time.Time              `json:"last_activity"`
	MFACompleted bool                   `json:"mfa_completed"`
	CreatedAt    time.Time              `json:"created_at"`
	Metadata     map[string]interface{} `json:"metadata,omitempty"`
}