auth

type AuthResponse = responses.AuthResponse

type ChangePasswordRequest struct {
	OldPassword string `json:"oldPassword" validate:"required"`
	NewPassword string `json:"newPassword" validate:"required,min=8"`
}

type Config struct {
	RequireEmailVerification bool `json:"requireEmailVerification"`
}

type ConfirmEmailChangeRequest struct {
	Token string `json:"token" validate:"required"`
}

type HookExecutor interface {
	ExecuteBeforeSignUp(ctx context.Context, req *SignUpRequest) error
	ExecuteAfterSignUp(ctx context.Context, response *responses.AuthResponse) error
	ExecuteBeforeSignIn(ctx context.Context, req *SignInRequest) error
	ExecuteAfterSignIn(ctx context.Context, response *responses.AuthResponse) error
	ExecuteBeforeSignOut(ctx context.Context, token string) error
	ExecuteAfterSignOut(ctx context.Context, token string) error
}

type PasswordResetRepository interface {
	CreateVerification(ctx context.Context, verification *schema.Verification) error
	FindVerificationByToken(ctx context.Context, token string) (*schema.Verification, error)
	FindVerificationByCode(ctx context.Context, code string, verificationType string) (*schema.Verification, error)
	MarkVerificationAsUsed(ctx context.Context, id xid.ID) error
	DeleteExpiredVerifications(ctx context.Context) error
}

type PasswordResetResult struct {
	Token string // URL-safe token for email links
	Code  string // 6-digit numeric code for mobile entry
}

type RequestEmailChangeRequest struct {
	NewEmail string `json:"newEmail" validate:"required,email"`
}

type RequestPasswordResetRequest struct {
	Email string `json:"email" validate:"required,email"`
}

type ResetPasswordRequest struct {
	Token       string `json:"token,omitempty"` // URL token for link-based reset
	Code        string `json:"code,omitempty"`  // 6-digit code for manual entry
	NewPassword string `json:"newPassword"     validate:"required,min=8"`
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceInterface interface {
	SignUp(ctx context.Context, req *SignUpRequest) (*responses.AuthResponse, error)
	SignIn(ctx context.Context, req *SignInRequest) (*responses.AuthResponse, error)
	SignOut(ctx context.Context, req *SignOutRequest) error
	CheckCredentials(ctx context.Context, email, password string) (*user.User, error)
	CreateSessionForUser(ctx context.Context, u *user.User, remember bool, ipAddress, userAgent string) (*responses.AuthResponse, error)
	GetSession(ctx context.Context, token string) (*responses.AuthResponse, error)
	UpdateUser(ctx context.Context, id xid.ID, req *user.UpdateUserRequest) (*user.User, error)
	RefreshSession(ctx context.Context, refreshToken string) (*responses.RefreshSessionResponse, error)

	// Password management
	// RequestPasswordReset returns (token, code, error) where token is for URL links and code is 6-digit for mobile
	RequestPasswordReset(ctx context.Context, email string) (string, string, error)
	ResetPassword(ctx context.Context, token, newPassword string) error
	ResetPasswordWithCode(ctx context.Context, code, newPassword string) error
	ValidateResetToken(ctx context.Context, token string) (bool, error)
	ChangePassword(ctx context.Context, userID xid.ID, oldPassword, newPassword string) error

	// Email change
	RequestEmailChange(ctx context.Context, userID xid.ID, newEmail string) (string, error)
	ConfirmEmailChange(ctx context.Context, token string) error
	ValidateEmailChangeToken(ctx context.Context, token string) (bool, error)
}

type SignInRequest struct {
	Email      string `json:"email"                validate:"required,email"`
	Password   string `json:"password"             validate:"required,min=8"`
	RememberMe bool   `json:"rememberMe,omitempty"`
	// Optional alternative naming per docs
	IPAddress string `json:"ipAddress,omitempty"`
	UserAgent string `json:"userAgent,omitempty"`
}

type SignOutRequest struct {
	Token string `json:"token" validate:"required"`
}

type SignUpRequest struct {
	Email      string `json:"email"                validate:"required,email"`
	Password   string `json:"password"             validate:"required,min=8"`
	Name       string `json:"name"                 validate:"required"`
	RememberMe bool   `json:"rememberMe,omitempty"`
	IPAddress  string `json:"ipAddress,omitempty"`
	UserAgent  string `json:"userAgent,omitempty"`
}