auth

type Middleware interface {
	AllOfRoles(requiredRoles ...string) gin.HandlerFunc
	AnyOfRoles(allowedRoles ...string) gin.HandlerFunc
	AnyAuthenticated() gin.HandlerFunc
}

type TokenContext struct {
	ID        string    `json:"id,omitempty"        bson:"_id,omitempty"`
	IssuedAt  time.Time `json:"issuedAt"            bson:"issuedAt"`
	ExpiresAt time.Time `json:"expiresAt,omitempty" bson:"expiresAt,omitempty"`
	Issuer    string    `json:"issuer,omitempty"    bson:"issuer,omitempty"`
	Subject   string    `json:"subject,omitempty"   bson:"subject,omitempty"`
	IP        string    `json:"ip,omitempty"        bson:"ip,omitempty"`
	Roles     []string  `json:"roles"               bson:"roles"`
	Resources []string  `json:"resources"           bson:"resources"`
	Raw       string    `json:"raw"                 bson:"raw"`
}

type TokenGenerator interface {
	Generate(...TokenOpt) (string, error)
}

type TokenManager interface {
	TokenVerifier
	TokenGenerator
	TokenRevoker
}

type TokenOpt = func(*TokenOptions)

type TokenOptions struct {
	Issuer    string
	Subject   string
	IP        string
	Duration  time.Duration
	Roles     []string
	Resources []string
}

type TokenRevoker interface {
	Revoke(*TokenContext) error
}

type TokenVerifier interface {
	Verify(tokenString string) (*TokenContext, error)
}