contract

type AccessDecisionManager interface {
	DecideAll(token Token, attributes []string, subject any) error

	DecideAny(token Token, attributes []string, subject any) error
}

type AccessDeniedHandler interface {
	Handle(runtimeInstance runtimecontract.Runtime, request httpcontract.Request, decisionErr error) (httpcontract.Response, error)
}

type Authenticator interface {
	Supports(request httpcontract.Request) bool

	Authenticate(request httpcontract.Request) (Token, error)
}

type DecisionStrategy int

type EntryPoint interface {
	Start(runtimeInstance runtimecontract.Runtime, request httpcontract.Request) (httpcontract.Response, error)
}

type Firewall interface {
	Name() string

	LoginPath() string

	LogoutPath() string

	Login(
		runtimeInstance runtimecontract.Runtime,
		request httpcontract.Request,
		input LoginInput,
	) (*LoginResult, error)

	Logout(
		runtimeInstance runtimecontract.Runtime,
		request httpcontract.Request,
		input LogoutInput,
	) (*LogoutResult, error)
}

type FirewallManager interface {
	Firewall(name string) (Firewall, error)
}

type LoginHandler interface {
	Login(runtimeInstance runtimecontract.Runtime, request httpcontract.Request, input LoginInput) (*LoginResult, error)
}

type LoginInput struct {
	Token Token
}

type LoginResult struct {
	Token    Token
	Response httpcontract.Response
}

type LogoutHandler interface {
	Logout(runtimeInstance runtimecontract.Runtime, request httpcontract.Request, input LogoutInput) (*LogoutResult, error)
}

type LogoutInput struct{}

type LogoutResult struct {
	Response httpcontract.Response
}

type Matcher interface {
	Matches(request httpcontract.Request) bool
}

type Rule interface {
	Applies(request httpcontract.Request) bool

	Check(request httpcontract.Request) error
}

type Token interface {
	IsAuthenticated() bool

	UserIdentifier() string

	Roles() []string
}

type TokenResolver func(request httpcontract.Request) Token

type TokenSource interface {
	Name() string

	Resolve(runtimeInstance runtimecontract.Runtime, request httpcontract.Request) (Token, error)
}

type VoteResult int

type Voter interface {
	Supports(attribute string, subject any) bool

	Vote(token Token, attribute string, subject any) VoteResult
}