auth

type APIKeyManager struct {
	// contains filtered or unexported fields
}

type AuthConfig struct {
	Enabled bool           `json:"enabled"`
	APIKeys []PluginAPIKey `json:"api_keys"`
	Roles   []PluginRole   `json:"roles"`
}

type AuthPlugin struct {
	Impl   PluginAuthService
	Logger hclog.Logger
}

type GRPCPluginAuthClient struct {
	// contains filtered or unexported fields
}

type GRPCPluginAuthServer struct {
	Impl PluginAuthService
	snoozePlugin.UnimplementedPluginAuthServer
}

type PluginAPIKey struct {
	PluginName  string    `json:"plugin_name"`
	APIKey      string    `json:"api_key"`
	Role        string    `json:"role"`
	CreatedAt   time.Time `json:"created_at"`
	ExpiresAt   time.Time `json:"expires_at"`
	LastUsedAt  time.Time `json:"last_used_at,omitempty"`
	Description string    `json:"description,omitempty"`
}

type PluginAuthService interface {
	Authenticate(ctx context.Context, pluginName, apiKey string) (bool, string, error)
	CheckPermission(ctx context.Context, pluginName, permission string) (bool, error)
}

type PluginAuthServiceImpl struct {
	// contains filtered or unexported fields
}

type PluginPermission struct {
	Name        string `json:"name"`
	Description string `json:"description"`
	Allowed     bool   `json:"allowed"`
}

type PluginRole struct {
	Name        string             `json:"name"`
	Description string             `json:"description"`
	Permissions []PluginPermission `json:"permissions"`
}

type SecurityConfig struct {
	Auth       AuthConfig      `json:"auth"`
	TLS        TLSConfig       `json:"tls"`
	Signatures SignatureConfig `json:"signatures"`
}

type SignatureConfig struct {
	Enabled          bool   `json:"enabled"`
	PublicKeyPath    string `json:"public_key_path"`
	VerifySignatures bool   `json:"verify_signatures"`
}

type TLSConfig struct {
	Enabled  bool   `json:"enabled"`
	CertPath string `json:"cert_path"`
	KeyPath  string `json:"key_path"`
}