authz

type FilterOptions struct {
	ObjectType string
	ObjectId   string
	Relation   string
	Subject    *SubjectSpec
	Context    *context.ContextSetSpec
	ObjectIds  []string
	SubjectIds []string
}

type MySQLRepository struct {
	database.SQLRepository
}

type ObjectSpec struct {
	ObjectType string `json:"objectType" validate:"required,valid_object_type"`
	ObjectId   string `json:"objectId" validate:"required,valid_object_id"`
}

type PostgresRepository struct {
	database.SQLRepository
}

type SortOptions struct {
	Column      string
	IsAscending bool
}

type SubjectSpec struct {
	UserId     string `json:"userId,omitempty" validate:"required_without_all=ObjectType ObjectId Relation"`
	ObjectType string `json:"objectType,omitempty" validate:"required_with=ObjectId,valid_object_type"`
	ObjectId   string `json:"objectId,omitempty" validate:"required_with=ObjectType,valid_object_id"`
	Relation   string `json:"relation,omitempty" validate:"valid_relation"`
}

type Warrant struct {
	ID              int64               `mysql:"id" postgres:"id"`
	ObjectType      string              `mysql:"objectType" postgres:"object_type"`
	ObjectId        string              `mysql:"objectId" postgres:"object_id"`
	Relation        string              `mysql:"relation" postgres:"relation"`
	SubjectType     string              `mysql:"subjectType" postgres:"subject_type"`
	SubjectId       string              `mysql:"subjectId" postgres:"subject_id"`
	SubjectRelation database.NullString `mysql:"subjectRelation" postgres:"subject_relation"`
	ContextHash     string              `mysql:"contextHash" postgres:"context_hash"`
	Context         []context.Context   `mysql:"context" postgres:"context"`
	CreatedAt       time.Time           `mysql:"createdAt" postgres:"created_at"`
	UpdatedAt       time.Time           `mysql:"updatedAt" postgres:"updated_at"`
	DeletedAt       database.NullTime   `mysql:"deletedAt" postgres:"deleted_at"`
}

type WarrantListParamParser struct{}

type WarrantRepository interface {
	Create(ctx context.Context, warrant Warrant) (int64, error)
	Get(ctx context.Context, objectType string, objectId string, relation string, subjectType string, subjectId string, subjectRelation string, contextHash string) (*Warrant, error)
	GetByID(ctx context.Context, id int64) (*Warrant, error)
	GetWithContextMatch(ctx context.Context, objectType string, objectId string, relation string, subjectType string, subjectId string, subjectRelation string, contextHash string) (*Warrant, error)
	GetAllMatchingWildcard(ctx context.Context, objectType string, objectId string, relation string, contextHash string) ([]Warrant, error)
	GetAllMatchingObjectAndRelation(ctx context.Context, objectType string, objectId string, relation string, subjectType string, contextHash string) ([]Warrant, error)
	GetAllMatchingObjectAndSubject(ctx context.Context, objectType string, objectId string, subjectType string, subjectId string, subjectRelation string) ([]Warrant, error)
	GetAllMatchingSubjectAndRelation(ctx context.Context, objectType string, relation string, subjectType string, subjectId string, subjectRelation string) ([]Warrant, error)
	List(ctx context.Context, filterOptions *FilterOptions, listParams middleware.ListParams) ([]Warrant, error)
	DeleteById(ctx context.Context, id int64) error
	DeleteAllByObject(ctx context.Context, objectType string, objectId string) error
	DeleteAllBySubject(ctx context.Context, subjectType string, subjectId string) error
}

type WarrantService struct {
	service.BaseService
	// contains filtered or unexported fields
}

type WarrantSpec struct {
	ObjectType string                 `json:"objectType" validate:"required,valid_object_type"`
	ObjectId   string                 `json:"objectId" validate:"required,valid_object_id"`
	Relation   string                 `json:"relation" validate:"required,valid_relation"`
	Subject    *SubjectSpec           `json:"subject" validate:"required_without=User"`
	User       *SubjectSpec           `json:"user,omitempty" validate:"required_without=Subject"`
	Context    context.ContextSetSpec `json:"context,omitempty"`
	IsImplicit *bool                  `json:"isImplicit,omitempty"`
	CreatedAt  time.Time              `json:"createdAt"`
}