jwt

type Exclude func(req any, info *grpc.UnaryServerInfo) bool

type Generator interface {
	GenerateToken(user User) (string, error)
}

type SignerConfig struct {
	PrivateKey string        `yaml:"private_key" env:"PRIVATE_KEY" env-required:"true"`
	Audience   []string      `yaml:"audience" env:"AUDIENCE" env-required:"true"`
	Algorithm  jwt.Algorithm `yaml:"algorithm" env:"ALGORITHM" env-default:"RS256"`
	TTL        time.Duration `yaml:"ttl" env:"TTL" env-default:"5m"`
}

type User struct {
	UserID string   `json:"user_id,omitempty"`
	Name   string   `json:"name,omitempty"`
	Email  string   `json:"email,omitempty"`
	Roles  []string `json:"roles,omitempty"`
}

type UserClaims struct {
	jwt.RegisteredClaims
	Name  string   `json:"name,omitempty"`
	Email string   `json:"email,omitempty"`
	Roles []string `json:"roles,omitempty"`
}

type Verifier interface {
	Parse(token string) (*jwt.Token, UserClaims, error)
	ExtractUser(token string) (User, error)
}

type VerifierConfig struct {
	PublicKey string        `yaml:"public_key" env:"PUBLIC_KEY" env-required:"true"`
	Audience  string        `yaml:"audience" env:"AUDIENCE" env-required:"true"`
	Algorithm jwt.Algorithm `yaml:"algorithm" env:"ALGORITHM" env-default:"RS256"`
}