auth

type Authenticator interface {
	// Authenticate verifies the token and returns a Caller
	Authenticate(ctx context.Context, tokenString string, useCache bool) (Caller, error)
}

type Authorizer interface {
	RequirePermissions(ctx context.Context, perms []models.Permission, checks ...func(*constraints)) error
	RequireAccessToInheritableResource(ctx context.Context, resourceType []types.ModelType, checks ...func(*constraints)) error
}

type Caller interface {
	GetSubject() string
	IsAdmin() bool
	RequirePermission(ctx context.Context, perm models.Permission, checks ...func(*constraints)) error
	RequireAccessToInheritableResource(ctx context.Context, resourceType types.ModelType, checks ...func(*constraints)) error
	UnauthorizedError(ctx context.Context, hasViewerAccess bool) error
	Authorized()
}

type CreateSessionInput struct {
	Token     *string
	Username  *string
	Password  *string
	UserAgent string
}

type CreateSessionResponse struct {
	AccessToken  string
	RefreshToken string
	CSRFToken    string
	Session      *models.UserSession
}

type ExchangeOAuthCodeForSessionTokenInput struct {
	OAuthCode         string
	OAuthCodeVerifier string
	RedirectURI       string
}

type ExchangeOAuthCodeForSessionTokenResponse struct {
	AccessToken string
	ExpiresIn   int
}

type InitiateSessionOauthCodeFlowInput struct {
	CodeChallenge       string
	CodeChallengeMethod string
	RedirectURI         string
	UserSessionID       string
}

type JobCaller struct {
	JobID     string
	ProjectID string
	// contains filtered or unexported fields
}

type MockAuthenticator struct {
	mock.Mock
}

type MockAuthorizer struct {
	mock.Mock
}

type MockCaller struct {
	mock.Mock
}

type MockOIDCTokenVerifier struct {
	mock.Mock
}

type MockOpenIDConfigFetcher struct {
	mock.Mock
}

type MockSigningKeyManager struct {
	mock.Mock
}

type MockUserSessionManager struct {
	mock.Mock
}

type OIDCConfiguration struct {
	Issuer        string `json:"issuer"`
	JwksURI       string `json:"jwks_uri"`
	TokenEndpoint string `json:"token_endpoint"`
	AuthEndpoint  string `json:"authorization_endpoint"`
}

type OIDCTokenVerifier interface {
	// VerifyToken verifies the OIDC token and returns the decoded token
	// If the token is not valid, it returns an error
	VerifyToken(ctx context.Context, token string, validationOptions []jwt.ValidateOption) (jwt.Token, error)
}

type OpenIDConfigFetcher interface {
	// GetOpenIDConfig returns the OIDC configuration for the given issuer
	GetOpenIDConfig(ctx context.Context, issuer string) (*OIDCConfiguration, error)
}

type RefreshSessionResponse struct {
	AccessToken  string
	RefreshToken string
	Session      *models.UserSession
}

type SCIMCaller struct {
	// contains filtered or unexported fields
}

type ServiceAccountCaller struct {
	ServiceAccountID  string
	ServiceAccountPRN string
	// contains filtered or unexported fields
}

type SetUserSessionCookiesInput struct {
	AccessToken       string
	RefreshToken      string
	CsrfToken         *string
	SessionExpiration time.Time
}

type SigningKeyManager interface {
	// GenerateToken creates a new JWT token
	GenerateToken(ctx context.Context, input *TokenInput) ([]byte, error)
	// VerifyToken verifies that the token is valid
	VerifyToken(ctx context.Context, token string, validateOptions ...jwt.ValidateOption) (*VerifyTokenOutput, error)
	// GetKeys returns the JSON Web Key Set (JWKS)
	GetKeys(ctx context.Context) ([]byte, error)
}

type SystemCaller struct {
	Subject string
}

type TokenInput struct {
	Expiration *time.Time
	Claims     map[string]string
	Subject    string
	JwtID      string
	Audience   string
}

type UserAuth struct {
	// contains filtered or unexported fields
}

type UserCaller struct {
	User          *models.User
	UserSessionID *string
	// contains filtered or unexported fields
}

type UserSessionManager interface {
	GetCurrentSession(ctx context.Context) (*models.UserSession, error)
	CreateSession(ctx context.Context, input *CreateSessionInput) (*CreateSessionResponse, error)
	RefreshSession(ctx context.Context, refreshToken string) (*RefreshSessionResponse, error)
	InvalidateSession(ctx context.Context, accessToken, refreshToken string) error
	VerifyCSRFToken(ctx context.Context, requestSessionID string, csrfToken string) error
	ExchangeOAuthCodeForSessionToken(ctx context.Context, input *ExchangeOAuthCodeForSessionTokenInput) (*ExchangeOAuthCodeForSessionTokenResponse, error)
	InitiateSessionOauthCodeFlow(ctx context.Context, input *InitiateSessionOauthCodeFlowInput) (string, error)
	SetUserSessionCookies(w http.ResponseWriter, input *SetUserSessionCookiesInput)
	ClearUserSessionCookies(w http.ResponseWriter)
	GetUserSessionAccessTokenCookieName() string
	GetUserSessionRefreshTokenCookieName() string
	GetUserSessionCSRFTokenCookieName() string
}

type VerifyTokenOutput struct {
	Token         jwt.Token
	PrivateClaims map[string]string
}