auth

type Authenticator struct {
	Config       config.AuthConfig
	AuthStore    IStoreWrapper
	Validator    IAuthValidator
	SessionStore IAuthSessionStore
}

type Authorization struct {
	Loader IStoreWrapper
}

type ConditionABAC struct {
	Attribute string
	Operator  string
	Value     any
}

type IAuthSession interface {
	SetSessionStore(session ISessionStore)
	Login(ctx *fiber.Ctx, userInfo IUserAuthInfo) (*UserLoginInfo, error)
	Refresh(ctx *fiber.Ctx, userKey string) (*UserLoginInfo, error)
	Logout(ctx *fiber.Ctx, userKey string) error
}

type IAuthSessionStore interface {
	GetSessionStore() ISessionStore
}

type IAuthStore interface {
	GetStore() IStore
}

type IAuthValidator interface {
	Name() string
	GetValue() string
	ValidateKey(ctx *fiber.Ctx) error
	VerifyUser(ctx *fiber.Ctx, userKey string, userInfo IUserAuthInfo) (bool, error)
	IsRequireLogin() bool
	GetAuthSession() IAuthSession
}

type IAuthenticationManager interface {
	GetAuthenticatonHandler() fiber.Handler
}

type IAuthorization interface {
	port.Library

	Check(user IUserAuthInfo, method string, path string) error
}

type IAuthorizationManager interface {
	GetAuthorization() IAuthorization
}

type IResourceInfo interface {
	GetAction() string
	GetMethod() string
	GetPath() string
	GetControlType() string // 'RBAC' or 'ABAC'
	IsUserPermitted(user IUserAuthInfo) error
}

type ISessionStore interface {
	Save(loginInfo *UserLoginInfo) error
	Refresh(oldAccessToken string, loginInfo *UserLoginInfo) error
	Delete(loginInfo *UserLoginInfo) error
	GetByAccessToken(accessToken string) (*UserLoginInfo, error)
	GetByRefreshToken(refreshToken string) (*UserLoginInfo, error)
	GetByUsername(username string) (*UserLoginInfo, error)
}

type IStore interface {
	GetUserLoginInfo(ctx *fiber.Ctx, username string, password string) (IUserAuthInfo, error) // digunakan saat login
	GetUserAuthInfo(ctx *fiber.Ctx, validator IAuthValidator) (IUserAuthInfo, error)          // digunakan untuk verifikasi userkey
	GetResourceInfo(method string, path string) (IResourceInfo, error)
}

type IStoreWrapper interface {
	CheckUser(ctx *fiber.Ctx, validator IAuthValidator) error
	GetLoadedUser() IUserAuthInfo

	CheckResource(method string, path string) (bool, error)
	GetLoadedResource() IResourceInfo
}

type IUserAuthInfo interface {
	GetControlType() string // 'RBAC' or 'ABAC'
}

type PolicyABAC struct {
	Effect    string // 'Allow' or 'Deny'
	Action    string
	Condition []ConditionABAC // condition with 'AND' operator (Nested and OR operation not supported yet)
}

type ResourceInfoABAC struct {
	Action            string       `mapstructure:"action"`
	Path              string       `mapstructure:"path"`
	Method            string       `mapstructure:"method"`
	PermittedPolicies []PolicyABAC `mapstructure:"policies"`
}

type ResourceInfoRBAC struct {
	Action         string   `mapstructure:"action"`
	Path           string   `mapstructure:"path"`
	Method         string   `mapstructure:"method"`
	PermittedRoles []string `mapstructure:"permissions"`
}

type StoreWrapper struct {
	Store    IStore
	User     IUserAuthInfo
	Resource IResourceInfo
}

type UserAuthInfo struct {
}

type UserAuthInfoABAC struct {
	UserAuthInfo
	UserId   string       `mapstructure:"key"`      // used by Api Key and JWT
	Username *string      `mapstructure:"user"`     // used by Basic Auth
	Password *string      `mapstructure:"password"` // used by Basic Auth
	Groups   []string     `mapstructure:"groups"`   // used by JWT Auth
	Policies []PolicyABAC `mapstructure:"policies"`
}

type UserAuthInfoRBAC struct {
	UserId   string   `mapstructure:"key"`         // used by Api Key and JWT
	Username *string  `mapstructure:"user"`        // used by Basic Auth
	Password *string  `mapstructure:"password"`    // used by Basic Auth
	Groups   []string `mapstructure:"groups"`      // used by JWT Auth
	Roles    []string `mapstructure:"permissions"` // combination of roles from all user groups owned by user
}

type UserLoginInfo struct {
	Username     string        `json:"user_id"`
	AccessToken  *string       `json:"access_token"`
	RefreshToken *string       `json:"refresh_token"`
	ExpiresIn    time.Duration `json:"expires_in"`
	RefreshIn    time.Duration `json:"refresh_in"`
	Groups       []string      `json:"user_role"`
	Permissions  []string      `json:"user_permissions"`
}