middleware

type CORSConfig struct {
	AllowOrigins     []string
	AllowMethods     []string
	AllowHeaders     []string
	ExposeHeaders    []string
	AllowCredentials bool
	MaxAge           string
}

type GraphQLRequest struct {
	Query         string         `json:"query"`
	OperationName string         `json:"operationName,omitempty"`
	Variables     map[string]any `json:"variables,omitempty"`
}

type GraphQLResolver func(query string, variables map[string]any) (any, error)

type IdempotencyClaim struct {
	Acquired    bool
	State       IdempotencyState
	Fingerprint string
	Response    *IdempotencyResponse
}

type IdempotencyConfig struct {
	TTL              time.Duration             // Cached response lifetime; defaults to 24 hours.
	PendingTTL       time.Duration             // In-flight claim lifetime; defaults to 30 seconds.
	PendingPoll      time.Duration             // Distributed claim poll interval; defaults to 25 milliseconds.
	MaxEntries       int                       // Maximum completed responses retained; defaults to 10,000.
	MaxKeyBytes      int                       // Maximum Idempotency-Key size; defaults to 256 bytes.
	MaxRequestBytes  int64                     // Maximum request body fingerprinted; defaults to 1 MiB.
	MaxResponseBytes int                       // Maximum response body cached; defaults to 1 MiB.
	Scope            func(*gpp.Context) string // Optional tenant/principal scope; defaults to tenant_id and sub.
	Store            IdempotencyStore          // Optional distributed store; defaults to bounded process memory.
}

type IdempotencyResponse struct {
	Status int         `json:"status"`
	Header http.Header `json:"header"`
	Body   []byte      `json:"body"`
}

type IdempotencyState string

type IdempotencyStore interface {
	Claim(ctx context.Context, key, fingerprint, owner string, ttl time.Duration) (IdempotencyClaim, error)
	Complete(ctx context.Context, key, fingerprint, owner string, response IdempotencyResponse, ttl time.Duration) error
	Release(ctx context.Context, key, owner string) error
}

type MemoryIdempotencyStore struct {
	// contains filtered or unexported fields
}

type RateLimiterConfig struct {
	Rate            float64       // Tokens added per second
	Capacity        float64       // Maximum token bucket capacity
	CleanupInterval time.Duration // Interval to clean inactive client buckets
	MaxClients      int           // Maximum number of client buckets retained in memory
}

type RedisIdempotencyConfig struct {
	Prefix             string
	TransactionRetries int
}

type RedisIdempotencyStore struct {
	// contains filtered or unexported fields
}

type SecurityConfig struct {
	XFrameOptions         string
	XContentTypeOptions   string
	XXSSProtection        string
	HSTSMaxAge            string
	ContentSecurityPolicy string
	ReferrerPolicy        string
}

type SingleflightConfig struct {
	MaxResponseBytes int                       // Maximum replayable body; defaults to 1 MiB.
	Scope            func(*gpp.Context) string // Optional additional application-specific scope.
	VaryHeaders      []string                  // Additional request headers included in the flight key.
}