authz

type CreateWarrantSpec struct {
	ObjectType string            `json:"objectType"        validate:"required,valid_object_type"`
	ObjectId   string            `json:"objectId"          validate:"required,valid_object_id"`
	Relation   string            `json:"relation"          validate:"required,valid_relation"`
	Subject    *SubjectSpec      `json:"subject"           validate:"required"`
	Context    map[string]string `json:"context,omitempty" validate:"excluded_with=Policy"`
	Policy     Policy            `json:"policy,omitempty"  validate:"excluded_with=Context"`
}

type DeleteWarrantSpec struct {
	ObjectType string            `json:"objectType"        validate:"required,valid_object_type"`
	ObjectId   string            `json:"objectId"          validate:"required,valid_object_id"`
	Relation   string            `json:"relation"          validate:"required,valid_relation"`
	Subject    *SubjectSpec      `json:"subject"           validate:"required"`
	Context    map[string]string `json:"context,omitempty" validate:"excluded_with=Policy"`
	Policy     Policy            `json:"policy,omitempty"  validate:"excluded_with=Context"`
}

type FilterParams struct {
	ObjectType      string `json:"objectType,omitempty"`
	ObjectId        string `json:"objectId,omitempty"`
	Relation        string `json:"relation,omitempty"`
	SubjectType     string `json:"subjectType,omitempty"`
	SubjectId       string `json:"subjectId,omitempty"`
	SubjectRelation string `json:"subjectRelation,omitempty"`
	Policy          Policy `json:"policy,omitempty"`
}

type ListWarrantsSpecV1 []WarrantSpec

type ListWarrantsSpecV2 struct {
	Results    []WarrantSpec   `json:"results"`
	NextCursor *service.Cursor `json:"nextCursor,omitempty"`
	PrevCursor *service.Cursor `json:"prevCursor,omitempty"`
}

type Model interface {
	GetID() int64
	GetObjectType() string
	GetObjectId() string
	GetRelation() string
	GetSubjectType() string
	GetSubjectId() string
	GetSubjectRelation() string
	GetPolicy() Policy
	GetPolicyHash() string
	GetCreatedAt() time.Time
	GetUpdatedAt() time.Time
	GetDeletedAt() *time.Time
	ToWarrantSpec() *WarrantSpec
	String() string
}

type MySQLRepository struct {
	database.SQLRepository
}

type Policy string

type PolicyContext map[string]interface{}

type PostgresRepository struct {
	database.SQLRepository
}

type SQLiteRepository struct {
	database.SQLRepository
}

type Service interface {
	Create(ctx context.Context, spec CreateWarrantSpec) (*WarrantSpec, *wookie.Token, error)
	List(ctx context.Context, filterParams FilterParams, listParams service.ListParams) ([]WarrantSpec, *service.Cursor, *service.Cursor, error)
	Delete(ctx context.Context, spec DeleteWarrantSpec) (*wookie.Token, error)
}

type SubjectSpec struct {
	ObjectType string `json:"objectType,omitempty" validate:"required_with=ObjectId,valid_object_type"`
	ObjectId   string `json:"objectId,omitempty" validate:"required_with=ObjectType,valid_object_id"`
	Relation   string `json:"relation,omitempty" validate:"omitempty,valid_relation"`
}

type Warrant struct {
	ID              int64      `mysql:"id" postgres:"id" sqlite:"id"`
	ObjectType      string     `mysql:"objectType" postgres:"object_type" sqlite:"objectType"`
	ObjectId        string     `mysql:"objectId" postgres:"object_id" sqlite:"objectId"`
	Relation        string     `mysql:"relation" postgres:"relation" sqlite:"relation"`
	SubjectType     string     `mysql:"subjectType" postgres:"subject_type" sqlite:"subjectType"`
	SubjectId       string     `mysql:"subjectId" postgres:"subject_id" sqlite:"subjectId"`
	SubjectRelation string     `mysql:"subjectRelation" postgres:"subject_relation" sqlite:"subjectRelation"`
	Policy          Policy     `mysql:"policy" postgres:"policy" sqlite:"policy"`
	PolicyHash      string     `mysql:"policyHash" postgres:"policy_hash" sqlite:"policyHash"`
	CreatedAt       time.Time  `mysql:"createdAt" postgres:"created_at" sqlite:"createdAt"`
	UpdatedAt       time.Time  `mysql:"updatedAt" postgres:"updated_at" sqlite:"updatedAt"`
	DeletedAt       *time.Time `mysql:"deletedAt" postgres:"deleted_at" sqlite:"deletedAt"`
}

type WarrantListParamParser struct{}

type WarrantRepository interface {
	Create(ctx context.Context, warrant Model) (int64, error)
	Get(ctx context.Context, objectType string, objectId string, relation string, subjectType string, subjectId string, subjectRelation string, policyHash string) (Model, error)
	GetByID(ctx context.Context, id int64) (Model, error)
	List(ctx context.Context, filterParams FilterParams, listParams service.ListParams) ([]Model, *service.Cursor, *service.Cursor, error)
	Delete(ctx context.Context, objectType string, objectId string, relation string, subjectType string, subjectId string, subjectRelation string, policyHash string) error
}

type WarrantService struct {
	service.BaseService
	// contains filtered or unexported fields
}

type WarrantSpec struct {
	ObjectType string            `json:"objectType"`
	ObjectId   string            `json:"objectId"`
	Relation   string            `json:"relation"`
	Subject    *SubjectSpec      `json:"subject"`
	Context    map[string]string `json:"context,omitempty"`
	Policy     Policy            `json:"policy,omitempty"`
	CreatedAt  time.Time         `json:"createdAt,omitempty"`
}