secure

type Password interface {
	// HashPassword hashes the password.
	HashPassword(password string) string
	// HashMatchesPassword matches hash with password.
	HashMatchesPassword(hash, password string) bool
}

type Secret [32]byte

type Token struct {
	// Token in non-hashed format.
	// Useful to return back to the user, but not stored in the DB.
	Token string `json:"-"`
	// Secret stores the hash of the token.
	Secret string `json:"secret"`
	// OwnerID stores current token owner ID.
	OwnerID string `json:"ownerID"`
	// ID to uniquely identify a doc in the DB. This field is also not stored
	// in the DB, but only used to quickly find the doc when the user send back
	// the user send back the clear text hash.
	ID string `json:"-"`
	// Expiration represents the time the token will be  expired.
	Expiration int64 `json:"exp"`
}

type TokenGenerator interface {
	// Create creates a new token.
	Create(ctx context.Context, ownerID string) (Token, error)
	// GetByOwnerID retrieves the Token object by id.
	GetByID(ctx context.Context, id string) (Token, error)
	// Delete deletes the Token object by id.
	Delete(ctx context.Context, id string) error
	// Hash hashes the clear text token and returns a string.
	Hash(ctx context.Context, b []byte) string
	// HashMatchesToken matches hash with token.
	HashMatchesToken(ctx context.Context, hash, token string) bool
}