providers

type APIKeyOption func(*APIKeyProvider)

type APIKeyProvider struct {
	// contains filtered or unexported fields
}

type APIKeyValidator func(ctx context.Context, apiKey string) (*auth.AuthContext, error)

type BasicAuthOption func(*BasicAuthProvider)

type BasicAuthProvider struct {
	// contains filtered or unexported fields
}

type BasicAuthValidator func(ctx context.Context, username, password string) (*auth.AuthContext, error)

type BearerTokenOption func(*BearerTokenProvider)

type BearerTokenProvider struct {
	// contains filtered or unexported fields
}

type BearerTokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

type LDAPConfig struct {
	// Connection settings
	Host string `yaml:"host" json:"host"`
	Port int    `yaml:"port" json:"port"`

	// Bind credentials (service account)
	BindDN       string `yaml:"bind_dn" json:"bind_dn"`
	BindPassword string `yaml:"bind_password" json:"bind_password"`

	// Search settings
	BaseDN       string   `yaml:"base_dn" json:"base_dn"`
	SearchFilter string   `yaml:"search_filter" json:"search_filter"` // e.g., "(uid=%s)" or "(sAMAccountName=%s)"
	Attributes   []string `yaml:"attributes" json:"attributes"`       // Attributes to fetch

	// TLS settings
	UseTLS             bool `yaml:"use_tls" json:"use_tls"`
	InsecureSkipVerify bool `yaml:"insecure_skip_verify" json:"insecure_skip_verify"`

	// Connection pool
	PoolSize          int           `yaml:"pool_size" json:"pool_size"`
	ConnectionTimeout time.Duration `yaml:"connection_timeout" json:"connection_timeout"`
	RequestTimeout    time.Duration `yaml:"request_timeout" json:"request_timeout"`
	IdleTimeout       time.Duration `yaml:"idle_timeout" json:"idle_timeout"`
	MaxRetries        int           `yaml:"max_retries" json:"max_retries"`
	RetryDelay        time.Duration `yaml:"retry_delay" json:"retry_delay"`

	// Cache settings
	EnableCache bool          `yaml:"enable_cache" json:"enable_cache"`
	CacheTTL    time.Duration `yaml:"cache_ttl" json:"cache_ttl"`

	// Group mapping
	GroupBaseDN string            `yaml:"group_base_dn" json:"group_base_dn"` // e.g., "ou=groups,dc=company,dc=com"
	GroupFilter string            `yaml:"group_filter" json:"group_filter"`   // e.g., "(member=%s)"
	RoleMapping map[string]string `yaml:"role_mapping" json:"role_mapping"`   // LDAP group DN -> app role

	// Advanced
	EnableReferrals bool `yaml:"enable_referrals" json:"enable_referrals"` // Handle AD referrals
	PageSize        int  `yaml:"page_size" json:"page_size"`               // Paging for large result sets
}

type LDAPProvider struct {
	// contains filtered or unexported fields
}

type OAuth2Option func(*OAuth2Provider)

type OAuth2Provider struct {
	// contains filtered or unexported fields
}

type OAuth2TokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

type OIDCOption func(*OIDCProvider)

type OIDCProvider struct {
	// contains filtered or unexported fields
}

type OIDCTokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)