models

type AMRClaim struct {
	ID                   uuid.UUID `json:"id" db:"id"`
	SessionID            uuid.UUID `json:"session_id" db:"session_id"`
	CreatedAt            time.Time `json:"created_at" db:"created_at"`
	UpdatedAt            time.Time `json:"updated_at" db:"updated_at"`
	AuthenticationMethod *string   `json:"authentication_method" db:"authentication_method"`
}

type AMREntry struct {
	Method    string `json:"method"`
	Timestamp int64  `json:"timestamp"`
	Provider  string `json:"provider,omitempty"`
}

type AccountLinkingDecision = int

type AccountLinkingResult struct {
	Decision       AccountLinkingDecision
	User           *User
	Identities     []*Identity
	LinkingDomain  string
	CandidateEmail provider.Email
}

type AuditAction string

type AuditLogEntry struct {
	ID        uuid.UUID `json:"id" db:"id"`
	Payload   JSONMap   `json:"payload" db:"payload"`
	CreatedAt time.Time `json:"created_at" db:"created_at"`
	IPAddress string    `json:"ip_address" db:"ip_address"`

	DONTUSEINSTANCEID uuid.UUID `json:"-" db:"instance_id"`
}

type AuthenticationMethod int

type AuthenticatorAssuranceLevel int

type Challenge struct {
	ID                  uuid.UUID            `json:"challenge_id" db:"id"`
	FactorID            uuid.UUID            `json:"factor_id" db:"factor_id"`
	CreatedAt           time.Time            `json:"created_at" db:"created_at"`
	VerifiedAt          *time.Time           `json:"verified_at,omitempty" db:"verified_at"`
	IPAddress           string               `json:"ip_address" db:"ip_address"`
	Factor              *Factor              `json:"factor,omitempty" belongs_to:"factor"`
	OtpCode             string               `json:"otp_code,omitempty" db:"otp_code"`
	WebAuthnSessionData *WebAuthnSessionData `json:"web_authn_session_data,omitempty" db:"web_authn_session_data"`
}

type ChallengeNotFoundError struct{}

type Cleaner interface {
	Clean(*storage.Connection) (int, error)
}

type Cleanup struct {
	// contains filtered or unexported fields
}

type CodeChallengeMethod int

type ConfirmationOrRecoveryTokenNotFoundError struct{}

type ConfirmationTokenNotFoundError struct{}

type CustomOAuthProvider struct {
	ID           uuid.UUID    `db:"id" json:"id"`
	ProviderType ProviderType `db:"provider_type" json:"provider_type"`

	// Common fields for both OAuth2 and OIDC
	Identifier          string        `db:"identifier" json:"identifier"`
	Name                string        `db:"name" json:"name"`
	ClientID            string        `db:"client_id" json:"client_id"`
	ClientSecret        string        `db:"client_secret" json:"-"` // Encrypted via EncryptedString, never expose in JSON
	AcceptableClientIDs slices.String `db:"acceptable_client_ids" json:"acceptable_client_ids"`
	Scopes              slices.String `db:"scopes" json:"scopes"`
	PKCEEnabled         bool          `db:"pkce_enabled" json:"pkce_enabled"`
	AttributeMapping    slices.Map    `db:"attribute_mapping" json:"attribute_mapping"`
	AuthorizationParams slices.Map    `db:"authorization_params" json:"authorization_params"`
	Enabled             bool          `db:"enabled" json:"enabled"`
	EmailOptional       bool          `db:"email_optional" json:"email_optional"`

	// OIDC-specific fields (null for OAuth2 providers)
	Issuer            *string        `db:"issuer" json:"issuer,omitempty"`
	DiscoveryURL      *string        `db:"discovery_url" json:"discovery_url,omitempty"`
	SkipNonceCheck    bool           `db:"skip_nonce_check" json:"skip_nonce_check"`
	CachedDiscovery   *OIDCDiscovery `db:"cached_discovery" json:"discovery_document,omitempty"`
	DiscoveryCachedAt *time.Time     `db:"discovery_cached_at" json:"-"` // Internal caching, not exposed in API

	// OAuth2-specific fields (null for OIDC providers)
	AuthorizationURL *string `db:"authorization_url" json:"authorization_url,omitempty"`
	TokenURL         *string `db:"token_url" json:"token_url,omitempty"`
	UserinfoURL      *string `db:"userinfo_url" json:"userinfo_url,omitempty"`
	JwksURI          *string `db:"jwks_uri" json:"jwks_uri,omitempty"`

	// Timestamps
	CreatedAt time.Time `db:"created_at" json:"created_at"`
	UpdatedAt time.Time `db:"updated_at" json:"updated_at"`
}

type CustomOAuthProviderNotFoundError struct{}

type Factor struct {
	ID uuid.UUID `json:"id" db:"id"`
	// TODO: Consider removing this nested user field. We don't use it.
	User                      User                       `json:"-" belongs_to:"user"`
	UserID                    uuid.UUID                  `json:"-" db:"user_id"`
	CreatedAt                 time.Time                  `json:"created_at" db:"created_at"`
	UpdatedAt                 time.Time                  `json:"updated_at" db:"updated_at"`
	Status                    string                     `json:"status" db:"status"`
	FriendlyName              string                     `json:"friendly_name,omitempty" db:"friendly_name"`
	Secret                    string                     `json:"-" db:"secret"`
	FactorType                string                     `json:"factor_type" db:"factor_type"`
	Challenge                 []Challenge                `json:"-" has_many:"challenges"`
	Phone                     storage.NullString         `json:"phone" db:"phone"`
	LastChallengedAt          *time.Time                 `json:"last_challenged_at" db:"last_challenged_at"`
	WebAuthnCredential        *MFAWebAuthnCredential     `json:"-" db:"web_authn_credential"`
	WebAuthnAAGUID            *uuid.UUID                 `json:"web_authn_aaguid,omitempty" db:"web_authn_aaguid"`
	LastWebAuthnChallengeData *LastWebAuthnChallengeData `json:"last_webauthn_challenge_data,omitempty" db:"last_webauthn_challenge_data"`
}

type FactorNotFoundError struct{}

type FactorState int

type FlowState struct {
	ID                   uuid.UUID  `json:"id" db:"id"`
	UserID               *uuid.UUID `json:"user_id,omitempty" db:"user_id"`
	AuthCode             *string    `json:"auth_code,omitempty" db:"auth_code"`
	AuthenticationMethod string     `json:"authentication_method" db:"authentication_method"`
	CodeChallenge        *string    `json:"code_challenge,omitempty" db:"code_challenge"`
	CodeChallengeMethod  *string    `json:"code_challenge_method,omitempty" db:"code_challenge_method"`
	ProviderType         string     `json:"provider_type" db:"provider_type"`
	ProviderAccessToken  string     `json:"provider_access_token" db:"provider_access_token"`
	ProviderRefreshToken string     `json:"provider_refresh_token" db:"provider_refresh_token"`
	AuthCodeIssuedAt     *time.Time `json:"auth_code_issued_at" db:"auth_code_issued_at"`
	CreatedAt            time.Time  `json:"created_at" db:"created_at"`
	UpdatedAt            time.Time  `json:"updated_at" db:"updated_at"`

	// OAuth context fields (previously stored in JWT state parameter)
	InviteToken        *string    `json:"invite_token,omitempty" db:"invite_token"`
	Referrer           *string    `json:"referrer,omitempty" db:"referrer"`
	OAuthClientStateID *uuid.UUID `json:"oauth_client_state_id,omitempty" db:"oauth_client_state_id"`
	LinkingTargetID    *uuid.UUID `json:"linking_target_id,omitempty" db:"linking_target_id"`
	EmailOptional      bool       `json:"email_optional" db:"email_optional"`
}

type FlowStateNotFoundError struct{}

type FlowStateParams struct {
	ProviderType         string
	AuthenticationMethod AuthenticationMethod
	CodeChallenge        string // empty for implicit flow
	CodeChallengeMethod  string // empty for implicit flow
	UserID               *uuid.UUID
	InviteToken          string
	Referrer             string
	OAuthClientStateID   *uuid.UUID
	LinkingTargetID      *uuid.UUID
	EmailOptional        bool
}

type FlowType int

type GrantParams struct {
	FactorID *uuid.UUID

	SessionNotAfter *time.Time
	SessionTag      *string

	OAuthClientID *uuid.UUID
	Scopes        *string

	UserAgent string
	IP        string
}

type Identity struct {
	// returned as identity_id in JSON for backward compatibility with the interface exposed by the client library
	// see https://github.com/supabase/gotrue-js/blob/c9296bbc27a2f036af55c1f33fca5930704bd021/src/lib/types.ts#L230-L240
	ID uuid.UUID `json:"identity_id" db:"id"`
	// returned as id in JSON for backward compatibility with the interface exposed by the client library
	// see https://github.com/supabase/gotrue-js/blob/c9296bbc27a2f036af55c1f33fca5930704bd021/src/lib/types.ts#L230-L240
	ProviderID   string             `json:"id" db:"provider_id"`
	UserID       uuid.UUID          `json:"user_id" db:"user_id"`
	IdentityData JSONMap            `json:"identity_data,omitempty" db:"identity_data"`
	Provider     string             `json:"provider" db:"provider"`
	LastSignInAt *time.Time         `json:"last_sign_in_at,omitempty" db:"last_sign_in_at"`
	CreatedAt    time.Time          `json:"created_at" db:"created_at"`
	UpdatedAt    time.Time          `json:"updated_at" db:"updated_at"`
	Email        storage.NullString `json:"email,omitempty" db:"email" rw:"r"`
}

type IdentityNotFoundError struct{}

type InvalidRedirectURIError struct {
	URI string
}

type JSONMap map[string]interface{}

type LastWebAuthnChallengeData struct {
	Challenge          Challenge       `json:"challenge"`
	Type               string          `json:"type"`
	CredentialResponse json.RawMessage `json:"credential_response"`
}

type MFAWebAuthnCredential struct {
	webauthn.Credential
}

type NewOAuthServerAuthorizationParams struct {
	ClientID            uuid.UUID
	RedirectURI         string
	Scope               string
	State               string
	Resource            string
	CodeChallenge       string
	CodeChallengeMethod string
	TTL                 time.Duration
	Nonce               string
}

type OAuthClientState struct {
	ID           uuid.UUID `json:"id" db:"id"`
	ProviderType string    `json:"provider_type" db:"provider_type"`
	CodeVerifier *string   `json:"code_verifier,omitempty" db:"code_verifier"`
	CreatedAt    time.Time `json:"created_at" db:"created_at"`
}

type OAuthClientStateNotFoundError struct{}

type OAuthServerAuthorization struct {
	ID                  uuid.UUID                      `json:"-" db:"id"`
	AuthorizationID     string                         `json:"authorization_id" db:"authorization_id"`
	ClientID            uuid.UUID                      `json:"-" db:"client_id"`
	UserID              *uuid.UUID                     `json:"user_id" db:"user_id"`
	RedirectURI         string                         `json:"redirect_uri" db:"redirect_uri"`
	Scope               string                         `json:"scope" db:"scope"`
	State               *string                        `json:"state,omitempty" db:"state"`
	Resource            *string                        `json:"resource,omitempty" db:"resource"`
	CodeChallenge       *string                        `json:"code_challenge,omitempty" db:"code_challenge"`
	CodeChallengeMethod *string                        `json:"code_challenge_method,omitempty" db:"code_challenge_method"`
	Nonce               *string                        `json:"nonce,omitempty" db:"nonce"` // OIDC nonce parameter
	ResponseType        OAuthServerResponseType        `json:"response_type" db:"response_type"`
	Status              OAuthServerAuthorizationStatus `json:"status" db:"status"`
	AuthorizationCode   *string                        `json:"-" db:"authorization_code"`
	CreatedAt           time.Time                      `json:"created_at" db:"created_at"`
	ExpiresAt           time.Time                      `json:"expires_at" db:"expires_at"`
	ApprovedAt          *time.Time                     `json:"approved_at" db:"approved_at"`

	// Relations with OAuth clients
	Client *OAuthServerClient `json:"client,omitempty" db:"-"`
}

type OAuthServerAuthorizationNotFoundError struct{}

type OAuthServerAuthorizationStatus string

type OAuthServerClient struct {
	ID                      uuid.UUID `json:"client_id" db:"id"`
	ClientSecretHash        string    `json:"-" db:"client_secret_hash"`
	RegistrationType        string    `json:"registration_type" db:"registration_type"`
	ClientType              string    `json:"client_type" db:"client_type"`
	TokenEndpointAuthMethod string    `json:"token_endpoint_auth_method" db:"token_endpoint_auth_method"`

	RedirectURIs string     `json:"-" db:"redirect_uris"`
	GrantTypes   string     `json:"grant_types" db:"grant_types"`
	ClientName   *string    `json:"client_name,omitempty" db:"client_name"`
	ClientURI    *string    `json:"client_uri,omitempty" db:"client_uri"`
	LogoURI      *string    `json:"logo_uri,omitempty" db:"logo_uri"`
	CreatedAt    time.Time  `json:"created_at" db:"created_at"`
	UpdatedAt    time.Time  `json:"updated_at" db:"updated_at"`
	DeletedAt    *time.Time `json:"deleted_at,omitempty" db:"deleted_at"`
}

type OAuthServerClientNotFoundError struct{}

type OAuthServerConsent struct {
	ID        uuid.UUID  `json:"id" db:"id"`
	UserID    uuid.UUID  `json:"user_id" db:"user_id"`
	ClientID  uuid.UUID  `json:"-" db:"client_id"`
	Scopes    string     `json:"scopes" db:"scopes"`
	GrantedAt time.Time  `json:"granted_at" db:"granted_at"`
	RevokedAt *time.Time `json:"revoked_at" db:"revoked_at"`
}

type OAuthServerResponseType string

type OIDCDiscovery struct {
	Issuer                 string   `json:"issuer"`
	AuthorizationEndpoint  string   `json:"authorization_endpoint"`
	TokenEndpoint          string   `json:"token_endpoint"`
	UserinfoEndpoint       string   `json:"userinfo_endpoint,omitempty"`
	JwksURI                string   `json:"jwks_uri"`
	ScopesSupported        []string `json:"scopes_supported,omitempty"`
	ResponseTypesSupported []string `json:"response_types_supported,omitempty"`
	GrantTypesSupported    []string `json:"grant_types_supported,omitempty"`
	SubjectTypesSupported  []string `json:"subject_types_supported,omitempty"`
}

type OneTimeToken struct {
	ID uuid.UUID `json:"id" db:"id"`

	UserID    uuid.UUID        `json:"user_id" db:"user_id"`
	TokenType OneTimeTokenType `json:"token_type" db:"token_type"`

	TokenHash string `json:"token_hash" db:"token_hash"`
	RelatesTo string `json:"relates_to" db:"relates_to"`

	CreatedAt time.Time `json:"created_at" db:"created_at"`
	UpdatedAt time.Time `json:"updated_at" db:"updated_at"`
}

type OneTimeTokenNotFoundError struct {
}

type OneTimeTokenType int

type Pagination struct {
	Page    uint64
	PerPage uint64
	Count   uint64
}

type ProviderType string

type RefreshToken struct {
	ID int64 `db:"id"`

	Token string `db:"token"`

	UserID uuid.UUID `db:"user_id"`

	Parent    storage.NullString `db:"parent"`
	SessionId *uuid.UUID         `db:"session_id"`

	Revoked   bool      `db:"revoked"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	DONTUSEINSTANCEID uuid.UUID `json:"-" db:"instance_id"`
}

type RefreshTokenNotFoundError struct{}

type SAMLAttribute struct {
	Name    string      `json:"name,omitempty"`
	Names   []string    `json:"names,omitempty"`
	Default interface{} `json:"default,omitempty"`
	Array   bool        `json:"array,omitempty"`
}

type SAMLAttributeMapping struct {
	Keys map[string]SAMLAttribute `json:"keys,omitempty"`
}

type SAMLProvider struct {
	ID uuid.UUID `db:"id" json:"-"`

	SSOProvider   *SSOProvider `belongs_to:"sso_providers" json:"-"`
	SSOProviderID uuid.UUID    `db:"sso_provider_id" json:"-"`

	EntityID    string  `db:"entity_id" json:"entity_id"`
	MetadataXML string  `db:"metadata_xml" json:"metadata_xml,omitempty"`
	MetadataURL *string `db:"metadata_url" json:"metadata_url,omitempty"`

	AttributeMapping SAMLAttributeMapping `db:"attribute_mapping" json:"attribute_mapping,omitempty"`

	NameIDFormat *string `db:"name_id_format" json:"name_id_format,omitempty"`

	CreatedAt time.Time `db:"created_at" json:"-"`
	UpdatedAt time.Time `db:"updated_at" json:"-"`
}

type SAMLRelayState struct {
	ID uuid.UUID `db:"id"`

	SSOProviderID uuid.UUID `db:"sso_provider_id"`

	RequestID string  `db:"request_id"`
	ForEmail  *string `db:"for_email"`

	RedirectTo string `db:"redirect_to"`

	CreatedAt   time.Time  `db:"created_at" json:"-"`
	UpdatedAt   time.Time  `db:"updated_at" json:"-"`
	FlowStateID *uuid.UUID `db:"flow_state_id" json:"flow_state_id,omitempty"`
	FlowState   *FlowState `db:"-" json:"flow_state,omitempty" belongs_to:"flow_state"`
}

type SAMLRelayStateNotFoundError struct{}

type SSODomain struct {
	ID uuid.UUID `db:"id" json:"-"`

	SSOProvider   *SSOProvider `belongs_to:"sso_providers" json:"-"`
	SSOProviderID uuid.UUID    `db:"sso_provider_id" json:"-"`

	Domain string `db:"domain" json:"domain"`

	CreatedAt time.Time `db:"created_at" json:"-"`
	UpdatedAt time.Time `db:"updated_at" json:"-"`
}

type SSOProvider struct {
	ID           uuid.UUID    `db:"id" json:"id"`
	ResourceID   *string      `db:"resource_id" json:"resource_id,omitempty"`
	Disabled     *bool        `db:"disabled" json:"disabled"`
	SAMLProvider SAMLProvider `has_one:"saml_providers" fk_id:"sso_provider_id" json:"saml,omitempty"`
	SSODomains   []SSODomain  `has_many:"sso_domains" fk_id:"sso_provider_id" json:"domains"`

	CreatedAt time.Time `db:"created_at" json:"created_at"`
	UpdatedAt time.Time `db:"updated_at" json:"updated_at"`
}

type SSOProviderNotFoundError struct{}

type Session struct {
	ID     uuid.UUID `json:"-" db:"id"`
	UserID uuid.UUID `json:"user_id" db:"user_id"`

	// NotAfter is overriden by timeboxed sessions.
	NotAfter *time.Time `json:"not_after,omitempty" db:"not_after"`

	CreatedAt time.Time  `json:"created_at" db:"created_at"`
	UpdatedAt time.Time  `json:"updated_at" db:"updated_at"`
	FactorID  *uuid.UUID `json:"factor_id" db:"factor_id"`
	AMRClaims []AMRClaim `json:"amr,omitempty" has_many:"amr_claims"`
	AAL       *string    `json:"aal" db:"aal"`

	RefreshedAt *time.Time `json:"refreshed_at,omitempty" db:"refreshed_at"`
	UserAgent   *string    `json:"user_agent,omitempty" db:"user_agent"`
	IP          *string    `json:"ip,omitempty" db:"ip"`

	Tag           *string    `json:"tag" db:"tag"`
	OAuthClientID *uuid.UUID `json:"oauth_client_id" db:"oauth_client_id"`
	Scopes        *string    `json:"scopes,omitempty" db:"scopes"` // OAuth scopes granted for this session

	RefreshTokenHmacKey *string `json:"-" db:"refresh_token_hmac_key"`
	RefreshTokenCounter *int64  `json:"-" db:"refresh_token_counter"`
}

type SessionNotFoundError struct{}

type SessionValidityConfig struct {
	Timebox           *time.Duration
	InactivityTimeout *time.Duration
	AllowLowAAL       *time.Duration
}

type SessionValidityReason = int

type SortDirection string

type SortField struct {
	Name string
	Dir  SortDirection
}

type SortParams struct {
	Fields []SortField
}

type User struct {
	ID uuid.UUID `json:"id" db:"id"`

	Aud       string             `json:"aud" db:"aud"`
	Role      string             `json:"role" db:"role"`
	Email     storage.NullString `json:"email" db:"email"`
	IsSSOUser bool               `json:"-" db:"is_sso_user"`

	EncryptedPassword *string    `json:"-" db:"encrypted_password"`
	EmailConfirmedAt  *time.Time `json:"email_confirmed_at,omitempty" db:"email_confirmed_at"`
	InvitedAt         *time.Time `json:"invited_at,omitempty" db:"invited_at"`

	Phone            storage.NullString `json:"phone" db:"phone"`
	PhoneConfirmedAt *time.Time         `json:"phone_confirmed_at,omitempty" db:"phone_confirmed_at"`

	ConfirmationToken  string     `json:"-" db:"confirmation_token"`
	ConfirmationSentAt *time.Time `json:"confirmation_sent_at,omitempty" db:"confirmation_sent_at"`

	// For backward compatibility only. Use EmailConfirmedAt or PhoneConfirmedAt instead.
	ConfirmedAt *time.Time `json:"confirmed_at,omitempty" db:"confirmed_at" rw:"r"`

	RecoveryToken  string     `json:"-" db:"recovery_token"`
	RecoverySentAt *time.Time `json:"recovery_sent_at,omitempty" db:"recovery_sent_at"`

	EmailChangeTokenCurrent  string     `json:"-" db:"email_change_token_current"`
	EmailChangeTokenNew      string     `json:"-" db:"email_change_token_new"`
	EmailChange              string     `json:"new_email,omitempty" db:"email_change"`
	EmailChangeSentAt        *time.Time `json:"email_change_sent_at,omitempty" db:"email_change_sent_at"`
	EmailChangeConfirmStatus int        `json:"-" db:"email_change_confirm_status"`

	PhoneChangeToken  string     `json:"-" db:"phone_change_token"`
	PhoneChange       string     `json:"new_phone,omitempty" db:"phone_change"`
	PhoneChangeSentAt *time.Time `json:"phone_change_sent_at,omitempty" db:"phone_change_sent_at"`

	ReauthenticationToken  string     `json:"-" db:"reauthentication_token"`
	ReauthenticationSentAt *time.Time `json:"reauthentication_sent_at,omitempty" db:"reauthentication_sent_at"`

	LastSignInAt *time.Time `json:"last_sign_in_at,omitempty" db:"last_sign_in_at"`

	AppMetaData  JSONMap `json:"app_metadata" db:"raw_app_meta_data"`
	UserMetaData JSONMap `json:"user_metadata" db:"raw_user_meta_data"`

	Factors    []Factor   `json:"factors,omitempty" has_many:"factors"`
	Identities []Identity `json:"identities" has_many:"identities"`

	CreatedAt   time.Time  `json:"created_at" db:"created_at"`
	UpdatedAt   time.Time  `json:"updated_at" db:"updated_at"`
	BannedUntil *time.Time `json:"banned_until,omitempty" db:"banned_until"`
	DeletedAt   *time.Time `json:"deleted_at,omitempty" db:"deleted_at"`
	IsAnonymous bool       `json:"is_anonymous" db:"is_anonymous"`

	DONTUSEINSTANCEID uuid.UUID `json:"-" db:"instance_id"`
}

type UserEmailUniqueConflictError struct{}

type UserNotFoundError struct{}

type WebAuthnChallenge struct {
	ID            uuid.UUID            `json:"id" db:"id"`
	UserID        *uuid.UUID           `json:"user_id,omitempty" db:"user_id"`
	ChallengeType string               `json:"challenge_type" db:"challenge_type"`
	SessionData   *WebAuthnSessionData `json:"session_data" db:"session_data"`
	CreatedAt     time.Time            `json:"created_at" db:"created_at"`
	ExpiresAt     time.Time            `json:"expires_at" db:"expires_at"`
}

type WebAuthnChallengeNotFoundError struct{}

type WebAuthnCredential struct {
	ID              uuid.UUID          `json:"id" db:"id"`
	UserID          uuid.UUID          `json:"user_id" db:"user_id"`
	CredentialID    []byte             `json:"-" db:"credential_id"`
	PublicKey       []byte             `json:"-" db:"public_key"`
	AttestationType string             `json:"attestation_type" db:"attestation_type"`
	AAGUID          *uuid.UUID         `json:"aaguid,omitempty" db:"aaguid"`
	SignCount       uint32             `json:"sign_count" db:"sign_count"`
	Transports      WebAuthnTransports `json:"transports" db:"transports"`
	BackupEligible  bool               `json:"backup_eligible" db:"backup_eligible"`
	BackedUp        bool               `json:"backed_up" db:"backed_up"`
	FriendlyName    string             `json:"friendly_name" db:"friendly_name"`
	CreatedAt       time.Time          `json:"created_at" db:"created_at"`
	UpdatedAt       time.Time          `json:"updated_at" db:"updated_at"`
	LastUsedAt      *time.Time         `json:"last_used_at,omitempty" db:"last_used_at"`
}

type WebAuthnCredentialNotFoundError struct{}

type WebAuthnSessionData struct {
	*webauthn.SessionData
}

type WebAuthnTransports []protocol.AuthenticatorTransport