auth

type Credential struct {
	// ID is the ID of the token. It behaves as a username, which is randomly generated
	ID string `json:"id"`

	// TenantID is the tenant which the credential belongs to.
	TenantID string `json:"tenant_id"`

	// Password is the HashedPassword used for authorizing traffic for
	// the tenant's credential.
	// Raw passwords should be 24 characters long and contain alphanumeric characters.
	// Raw passwords are never stored, only the hash and salt are stored.
	Password HashedPassword `json:"password"`
}

type CredentialStore interface {
	// GetCredential retrieves a credential from the store
	GetCredential(ctx context.Context, id string) (*Credential, error)

	// CacheCredential caches a credential in the store
	CacheCredential(id string, cred *Credential)
}

type HashedPassword struct {
	CipherText string `json:"cipher_text"`
	Salt       string `json:"salt"`
}

type ObjectCredentialStore struct {
	// contains filtered or unexported fields
}

type PasswordFactory struct {
	Digest     func() hash.Hash
	SaltSize   int
	KeyLen     int
	Iterations int
}