mfa

type BackupCodeConfig struct {
	// CodeLength is the length of each backup code
	CodeLength int

	// CodeCount is the number of backup codes to generate
	CodeCount int
}

type BasicMFAService struct {
	// Secret is the TOTP secret key
	Secret string `json:"secret"`

	// Algorithm is the TOTP algorithm (default: SHA1)
	Algorithm string `json:"algorithm"`

	// Digits is the number of digits in the TOTP code (default: 6)
	Digits int `json:"digits"`

	// Period is the TOTP period in seconds (default: 30)
	Period int `json:"period"`

	// Issuer is the name of the issuer for the TOTP
	Issuer string `json:"issuer"`

	// AccountName is the account name for the TOTP
	AccountName string `json:"account_name"`
}

type DefaultMFAManager struct {
	// contains filtered or unexported fields
}

type InMemoryMFAStore struct {
	// contains filtered or unexported fields
}

type MFABackupCode struct {
	// Code is the backup code
	Code string

	// Used indicates whether the code has been used
	Used bool

	// UsedAt is the time when the code was used
	UsedAt time.Time
}

type MFABoundaryEnforcer struct {
	// contains filtered or unexported fields
}

type MFAHandler struct {
	// contains filtered or unexported fields
}

type MFAManager interface {
	// Settings management
	GetMFASettings(ctx context.Context, userID string) (*MFASettings, error)
	EnableMFA(ctx context.Context, userID string, method MFAMethod) (*MFASettings, error)
	DisableMFA(ctx context.Context, userID string) error

	// TOTP methods
	SetupTOTP(ctx context.Context, userID string, username string) (*TOTPConfig, error)
	VerifyTOTPSetup(ctx context.Context, userID string, code string) error

	// Backup code methods
	GenerateBackupCodes(ctx context.Context, userID string) ([]MFABackupCode, error)

	// WebAuthn methods
	SetupWebAuthn(ctx context.Context, userID string, username string, displayName string) (map[string]interface{}, error)
	VerifyWebAuthnSetup(ctx context.Context, userID string, attestationResponse string) error
	InitiateWebAuthnVerification(ctx context.Context, userID string) (map[string]interface{}, error)
	VerifyWebAuthnAssertion(ctx context.Context, userID string, assertionResponse string) (bool, error)

	// SMS methods
	SetupSMS(ctx context.Context, userID string, phoneNumber string) error
	VerifySMSSetup(ctx context.Context, userID string, code string) error
	InitiateSMSVerification(ctx context.Context, userID string) error
	VerifySMSCode(ctx context.Context, userID string, code string) (bool, error)

	// General MFA methods
	VerifyMFA(ctx context.Context, userID string, method MFAMethod, code string) (bool, error)
	ValidateMFASettings(ctx context.Context, userID string) (bool, []string, error)
}

type MFAManagerConfig struct {
	// TOTPConfig is the default TOTP configuration
	TOTPConfig *TOTPConfig

	// BackupConfig is the default backup code configuration
	BackupConfig *BackupCodeConfig

	// WebAuthnConfig is the default WebAuthn configuration
	WebAuthnConfig *WebAuthnConfig

	// SMSConfig is the default SMS configuration
	SMSConfig *SMSConfig

	// VerificationExpiration is the expiration time for verifications in minutes
	VerificationExpiration int
}

type MFAMethod string

type MFAMethodSettings struct {
	Method MFAMethod
	Status MFAStatus
}

type MFASettings struct {
	// UserID is the ID of the user
	UserID string

	// Enabled indicates whether MFA is enabled for the user
	Enabled bool

	// DefaultMethod is the default MFA method for the user
	DefaultMethod MFAMethod

	// Methods is a map of MFA methods to their status
	Methods map[MFAMethod]MFAStatus

	// TOTPConfig is the TOTP configuration for the user
	TOTPConfig *TOTPConfig

	// BackupCodes are the backup codes for the user
	BackupCodes []MFABackupCode

	// WebAuthnCredentials are the WebAuthn credentials for the user
	WebAuthnCredentials []WebAuthnCredential

	// PhoneNumber is the phone number for SMS verification
	PhoneNumber string

	// LastUpdated is the time when the settings were last updated
	LastUpdated time.Time
}

type MFAStatus string

type MFAStore interface {
	// GetMFASettings gets the MFA settings for a user
	GetMFASettings(ctx context.Context, userID string) (*MFASettings, error)

	// SaveMFASettings saves the MFA settings for a user
	SaveMFASettings(ctx context.Context, settings *MFASettings) error

	// DeleteMFASettings deletes the MFA settings for a user
	DeleteMFASettings(ctx context.Context, userID string) error

	// CreateVerification creates a new MFA verification
	CreateVerification(ctx context.Context, verification *MFAVerification) error

	// GetVerification gets an MFA verification
	GetVerification(ctx context.Context, userID string) (*MFAVerification, error)

	// DeleteVerification deletes an MFA verification
	DeleteVerification(ctx context.Context, userID string) error
}

type MFAVerification struct {
	// UserID is the ID of the user
	UserID string

	// Method is the MFA method used for verification
	Method MFAMethod

	// Challenge is the challenge for WebAuthn verification
	Challenge string

	// SMSVerification is the SMS verification
	SMSVerification *SMSVerification

	// CreatedAt is the time when the verification was created
	CreatedAt time.Time

	// ExpiresAt is the time when the verification expires
	ExpiresAt time.Time
}

type MockMFAManager struct {
	// contains filtered or unexported fields
}

type MockSMSProvider struct{}

type SMSConfig struct {
	CodeLength        int               // Length of the SMS verification code
	CodeExpiration    int               // Expiration time for SMS codes in minutes
	SMSProvider       string            // SMS provider to use
	SMSProviderConfig map[string]string // Configuration for the SMS provider
}

type SMSProvider interface {
	// SendSMS sends an SMS message
	SendSMS(to, from, message string) error
}

type SMSVerification struct {
	PhoneNumber string    // Phone number to send the verification code to
	Code        string    // Verification code
	CreatedAt   time.Time // Time when the verification was created
	ExpiresAt   time.Time // Time when the verification expires
	VerifiedAt  time.Time // Time when the verification was verified
	Verified    bool      // Whether the verification has been verified
	Attempts    int       // Number of verification attempts
	MaxAttempts int       // Maximum number of verification attempts
}

type TOTPConfig struct {
	Secret    string // Secret key for TOTP
	QRCodeURL string // QR code URL for easy setup
	Digits    int    // Number of digits in the TOTP code (default: 6)
	Period    int    // Period in seconds for TOTP (default: 30)
	Algorithm string // Algorithm for TOTP (default: SHA1)
	Issuer    string // Issuer name for TOTP (default: LLMrecon)
}

type WebAuthnConfig struct {
	// RelyingPartyID is the ID of the relying party (typically the domain name)
	RelyingPartyID string

	// RelyingPartyName is the name of the relying party
	RelyingPartyName string

	// Origin is the origin of the relying party
	Origin string

	// UserVerification specifies the user verification requirement
	// Can be "required", "preferred", or "discouraged"
	UserVerification string

	// AttestationPreference specifies the attestation conveyance preference
	// Can be "none", "indirect", "direct", or "enterprise"
	AttestationPreference string

	// Timeout is the timeout for WebAuthn operations in milliseconds
	Timeout int

	// ChallengeLength is the length of the challenge in bytes
	ChallengeLength int
}

type WebAuthnCredential struct {
	// ID is the credential ID
	ID string

	// PublicKey is the public key of the credential
	PublicKey string

	// AAGUID is the Authenticator Attestation GUID
	AAGUID string

	// SignCount is the signature counter
	SignCount uint32

	// CreatedAt is the time when the credential was created
	CreatedAt time.Time

	// LastUsedAt is the time when the credential was last used
	LastUsedAt time.Time

	// DeviceType is the type of device (e.g., "security key", "platform")
	DeviceType string

	// DeviceName is a user-friendly name for the device
	DeviceName string
}

type WebAuthnDevice struct {
	ID        string
	Name      string
	CreatedAt time.Time
	LastUsed  time.Time
}