kernel

type Authenticator interface {
	ResolveSession(ctx context.Context, token string) (Principal, error)
}

type Guard func(http.Handler) http.Handler

type Principal struct {
	SessionID string
	UserID    string
	Username  string
	Email     string
	Provider  string
	IsAdmin   bool
}