providers

type APIKeyOption func(*APIKeyProvider)

type APIKeyProvider struct {
	// contains filtered or unexported fields
}

type APIKeyValidator func(ctx context.Context, apiKey string) (*auth.AuthContext, error)

type BasicAuthOption func(*BasicAuthProvider)

type BasicAuthProvider struct {
	// contains filtered or unexported fields
}

type BasicAuthValidator func(ctx context.Context, username, password string) (*auth.AuthContext, error)

type BearerTokenOption func(*BearerTokenProvider)

type BearerTokenProvider struct {
	// contains filtered or unexported fields
}

type BearerTokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

type LDAPConfig struct {
	// Connection settings
	Host string `json:"host" yaml:"host"`
	Port int    `json:"port" yaml:"port"`

	// Bind credentials (service account)
	BindDN       string `json:"bind_dn"       yaml:"bind_dn"`
	BindPassword string `json:"bind_password" yaml:"bind_password"`

	// Search settings
	BaseDN       string   `json:"base_dn"       yaml:"base_dn"`
	SearchFilter string   `json:"search_filter" yaml:"search_filter"` // e.g., "(uid=%s)" or "(sAMAccountName=%s)"
	Attributes   []string `json:"attributes"    yaml:"attributes"`    // Attributes to fetch

	// TLS settings
	UseTLS             bool `json:"use_tls"              yaml:"use_tls"`
	InsecureSkipVerify bool `json:"insecure_skip_verify" yaml:"insecure_skip_verify"`

	// Connection pool
	PoolSize          int           `json:"pool_size"          yaml:"pool_size"`
	ConnectionTimeout time.Duration `json:"connection_timeout" yaml:"connection_timeout"`
	RequestTimeout    time.Duration `json:"request_timeout"    yaml:"request_timeout"`
	IdleTimeout       time.Duration `json:"idle_timeout"       yaml:"idle_timeout"`
	MaxRetries        int           `json:"max_retries"        yaml:"max_retries"`
	RetryDelay        time.Duration `json:"retry_delay"        yaml:"retry_delay"`

	// Cache settings
	EnableCache bool          `json:"enable_cache" yaml:"enable_cache"`
	CacheTTL    time.Duration `json:"cache_ttl"    yaml:"cache_ttl"`

	// Group mapping
	GroupBaseDN string            `json:"group_base_dn" yaml:"group_base_dn"` // e.g., "ou=groups,dc=company,dc=com"
	GroupFilter string            `json:"group_filter"  yaml:"group_filter"`  // e.g., "(member=%s)"
	RoleMapping map[string]string `json:"role_mapping"  yaml:"role_mapping"`  // LDAP group DN -> app role

	// Advanced
	EnableReferrals bool `json:"enable_referrals" yaml:"enable_referrals"` // Handle AD referrals
	PageSize        int  `json:"page_size"        yaml:"page_size"`        // Paging for large result sets
}

type LDAPProvider struct {
	// contains filtered or unexported fields
}

type OAuth2Option func(*OAuth2Provider)

type OAuth2Provider struct {
	// contains filtered or unexported fields
}

type OAuth2TokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)

type OIDCOption func(*OIDCProvider)

type OIDCProvider struct {
	// contains filtered or unexported fields
}

type OIDCTokenValidator func(ctx context.Context, token string) (*auth.AuthContext, error)