auth

type Claims struct {
	jwt.RegisteredClaims
	UserID string `json:"uid"`
	Email  string `json:"email"`
	Role   string `json:"role"`
	SiteID string `json:"sid"`
}

type LocalProvider struct {
	// contains filtered or unexported fields
}

type OAuthProvider struct {
	// contains filtered or unexported fields
}

type Provider interface {
	// Name returns the provider identifier.
	Name() string

	// Authenticate validates credentials and returns user info.
	Authenticate(ctx context.Context, credentials map[string]string) (*UserInfo, error)

	// GetAuthURL returns the URL to redirect for OAuth login (OAuth providers only).
	GetAuthURL(state string) string

	// HandleCallback processes the OAuth callback and returns user info.
	HandleCallback(ctx context.Context, code string) (*UserInfo, error)
}

type ProviderRegistry struct {
	// contains filtered or unexported fields
}

type UserInfo struct {
	ID            string
	Email         string
	Name          string
	AvatarURL     string
	EmailVerified bool
	Provider      string // "local", "google", "github", "cognito", etc.
	ProviderID    string // ID from OAuth provider
	Role          string // admin, editor, viewer
}