auth

type AuthOracle interface {
	// InitFromRequest initialaizes an authentic from an HTTP request. This is typically called by the HTTP handler SetAuthorizationContext. This method expects an empty, non-nil reciever.
	InitFromRequest(*http.Request) Terror

	// RquireAuthentication creates an appropriate, typed error if the request is not authenticated.
	RequireAuthentication() Terror

	// IsRequestAuthenticated returns true if the request is authenticated, and false otherwise.
	IsRequestAuthenticated() bool

	// GetAuthID returns the authenticated user's authorization ID as maintained by the authentication provider. This is distinct from our own ID.
	GetAuthID() string

	// GetRequest returns the HTTP request which was processed to determine authentication. The request is usually available from the handler, and this is provided as a convenience.
	GetRequest() *http.Request
}

type Claimant interface {
	// HasAllClaims returns true if the authenticated user has all the indicated claims.
	HasAllClaims(claims ...string) bool

	// RequireAllClaims returns a typed error unless the authenticated user has all the indicated claims.
	RequireAllClaims(claims ...string) Terror

	// HasAnyClaim returns true if the authenticated user has any of the indicated claims.
	HasAnyClaim(claims ...string) bool

	// RequireAnyClaim returns a typed error unless the authenticated user has at least on of the indicated claims.
	RequireAnyClaims()

	// GetClaims provides a list of the claims held by the authenticated user. If the user has no claims, or is not authenticated, this will be an empty, non-nil list.
	GetClaims() []string
}

type FbAuthOracle interface {
	// GetFirebaseAuthClient returns the underlying Firebase authentication/authorization client used to verify tokens and retrieve claims from google.
	GetFirebaseAuthClient() *fbauth.Client
}

type FbOracle struct {
	// contains filtered or unexported fields
}