auth

type Claims interface {
	jwt.Claims
}

type JWTHelper interface {
	Parse(token string, claims Claims) error
	CreateToken(claims Claims) (string, error)
}

type RightsEnforcer interface {
	Enforce(ctx context.Context, session pbv1.Session, value protoreflect.Value) (context.Context, error)
}

type RightsEnforcerDescriptor struct {
	Name           string
	RightsEnforcer RightsEnforcer
}

type RightsEnforcerDescriptorOut struct {
	fx.Out
	Descriptor RightsEnforcerDescriptor `group:"rights_enforcer"`
}

type RoleEnforcer interface {
	Enforce(session pbv1.Session, role pbv1.Role, permission pbv1.Permission) (bool, error)
}

type RoleEnforcerConfig struct {
	ModelFile  string `yaml:"model_file"`
	PolicyFile string `yaml:"policy_file"`
}

type SessionClaims struct {
	jwt.StandardClaims
	pbv1.Session
}

type SessionConfig struct {
	Audience string        `yaml:"audience"`
	Issuer   string        `yaml:"issuer"`
	Duration time.Duration `yaml:"duration"`
}

type SessionManager interface {
	CreateTokenBySession(context.Context, pbv1.Session) (string, error)
	CreateToken(ctx context.Context, userUUID string, group pbv1.UserGroup) (string, error)
	GetSessionByToken(ctx context.Context, token string) (pbv1.Session, error)
}

type SslConfig struct {
	CertFile       string `yaml:"cert_file"`
	PrivateKeyFile string `yaml:"private_key_file"`
	PublicKeyFile  string `yaml:"public_key_file"`
}