auth

type Claims struct {
	Email         string `json:"email,omitempty"`
	EmailVerified bool   `json:"email_verified,omitempty"`
	Name          string `json:"name,omitempty"`
	Iss           string `json:"iss,omitempty"`
	Sub           string `json:"sub,omitempty"`
	// The attributes are parsed from a configured claim and added here,
	// they are needed in the JSON representation for the MarshalBinary and
	// UnmarshalBinary methods below. We use the `enduro_internal_attributes`
	// JSON key to reduce the possibility of a conflict when the JWT is parsed.
	Attributes []string `json:"enduro_internal_attributes,omitempty"`
}

type Config struct {
	Enabled bool
	OIDC    *OIDCConfig
	Ticket  *TicketConfig
}

type InMemKey struct {
	// contains filtered or unexported fields
}

type InMemStore struct {
	// contains filtered or unexported fields
}

type NoopTokenVerifier struct{}

type OIDCABACConfig struct {
	Enabled            bool
	ClaimPath          string
	ClaimPathSeparator string
	ClaimValuePrefix   string
	UseRoles           bool
	RolesMapping       map[string][]string
}

type OIDCConfig struct {
	ProviderURL            string
	ClientID               string
	SkipEmailVerifiedCheck bool

	// Attribute Based Access Control configuration.
	ABAC OIDCABACConfig
}

type OIDCTokenVerifier struct {
	// contains filtered or unexported fields
}

type RedisConfig struct {
	Address string
	Prefix  string
}

type RedisStore struct {
	// contains filtered or unexported fields
}

type TicketConfig struct {
	Redis *RedisConfig
}

type TicketProvider interface {
	// Request requests a new ticket saving the key/value pair in the store.
	Request(ctx context.Context, value any) (string, error)
	// Check checks that a ticket is known to the provider and scan its value,
	// not including tickets that exceeded the time-to-live attribute.
	Check(ctx context.Context, ticket *string, value any) error
	// Close closes the provider, releasing resources associated to the store.
	Close() error
}

type TicketStore interface {
	// SetEx persists a key/value pair with a timeout.
	SetEx(ctx context.Context, key string, value any, ttl time.Duration) error
	// GetDel checks whether a key exists in the store and scans the value.
	// It returns ErrKeyNotFound if the key was not found or expired.
	GetDel(ctx context.Context, key string, value any) error
	// Close the client.
	Close() error
}

type TokenVerifier interface {
	Verify(ctx context.Context, token string) (*Claims, error)
}