authz

type Config struct {
	RolePermissionMappings []RoleMapping
}

type CtxData struct {
	UserID            string
	OrgID             string
	ProjectID         string
	AgentID           string
	PreferredLanguage string
	ResourceOwner     string
}

type Grant struct {
	OrgID string
	Roles []string
}

type Grants []*Grant

type Instance interface {
	InstanceID() string
	ProjectID() string
	ConsoleClientID() string
	ConsoleApplicationID() string
	RequestedDomain() string
	RequestedHost() string
	DefaultLanguage() language.Tag
	DefaultOrganisationID() string
}

type InstanceVerifier interface {
	InstanceByHost(context.Context, string) (Instance, error)
}

type MemberType int32

type Membership struct {
	MemberType  MemberType
	AggregateID string
	//ObjectID differs from aggregate id if object is sub of an aggregate
	ObjectID string

	Roles []string
}

type Memberships []*Membership

type MethodMapping map[string]Option

type Option struct {
	Permission string
	CheckParam string
	Feature    string
}

type RoleMapping struct {
	Role        string
	Permissions []string
}

type SystemAPIUser struct {
	Path    string //if a path is specified, the key will be read from that path
	KeyData []byte //else you can also specify the data directly in the KeyData
}

type TokenVerifier struct {
	// contains filtered or unexported fields
}