apikey

type APIKey struct {
	ID                    APIKeyID   `json:"id"`
	Name                  string     `json:"name"`
	Description           *string    `json:"description,omitzero"`
	ExpiresAt             time.Time  `json:"expires_at"`
	CreatedAt             time.Time  `json:"created_at"`
	LastUsedAt            *time.Time `json:"last_used_at,omitzero"`
	ExpirationEmailSentAt *time.Time `json:"-"`
}

type APIKeyID = typeid.TypeID[apiKeyPrefix]

type CreateParams struct {
	Name        string
	Description *string
	ExpiresAt   time.Time
}

type ListParams struct {
	Page
}

type Page struct {
	Page  int
	Limit int
}

type PostgresStore struct {
	// contains filtered or unexported fields
}

type RenewParams struct {
	ExpiresAt time.Time
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceOption func(*Service)

type Store interface {
	Create(ctx context.Context, userID string, keyHash string, params CreateParams) (APIKey, error)
	ListForUser(ctx context.Context, userID string, params ListParams) ([]APIKey, int, error)
	Revoke(ctx context.Context, userID string, id APIKeyID) error
	// Renew rotates the token hash and expiry; allowed only when
	// the key is already expired.
	Renew(ctx context.Context, userID string, id APIKeyID, keyHash string, expiresAt time.Time) (APIKey, error)
	// ValidByHash resolves a hash to the owning user, atomically
	// bumping last_used_at (UPDATE ... RETURNING).
	ValidByHash(ctx context.Context, keyHash string) (APIKey, user.User, error)
}