cockpit

type Capability string

type LoginCode struct {
	Code      string
	ExpiresAt time.Time
}

type MetadataHandler func(http.ResponseWriter, *http.Request, Principal)

type Options struct {
	// CanonicalHost is the loopback name the listener has (see CanonicalHost).
	CanonicalHost string
	// Config is wb.yaml's cockpit: section, after defaults.
	Config wbconfig.CockpitConfig
	// Now is the clock login codes and sessions expire against; nil means
	// time.Now.
	Now func() time.Time
	// Random is the source of login codes and session identifiers; nil means
	// crypto/rand.
	Random io.Reader
	// Sessions holds the owner sessions; nil means a fresh in-memory store.
	Sessions SessionStore
}

type OwnerHandler func(http.ResponseWriter, *http.Request)

type Principal struct {
	Name         string       `json:"principal"`
	Capabilities []Capability `json:"capabilities"`
}

type Server struct {
	// contains filtered or unexported fields
}

type SessionStore interface {
	// Create starts a session at now and returns its identifier.
	Create(now time.Time) (string, error)
	// Valid reports whether id names a session that has not ended or expired
	// at now.
	Valid(id string, now time.Time) bool
	// End ends the session id names, if any.
	End(id string)
}