facade

type AuditLogFacade struct {
	AuditLogQuery         AuditLogQuery
	Clock                 clock.Clock
	AuditDatabase         *auditdb.ReadHandle
	AuditLogFeatureConfig *config.AuditLogFeatureConfig
}

type AuditLogQuery interface {
	Count(opts audit.QueryPageOptions) (uint64, error)
	QueryPage(opts audit.QueryPageOptions, pageArgs graphqlutil.PageArgs) ([]model.PageItemRef, error)
}

type AuthenticatorFacade struct {
	Authenticators AuthenticatorService
	Interaction    InteractionService
}

type AuthenticatorService interface {
	Get(id string) (*authenticator.Info, error)
	Count(userID string) (uint64, error)
	ListRefsByUsers(userIDs []string, authenticatorType *apimodel.AuthenticatorType, authenticatorKind *authenticator.Kind) ([]*authenticator.Ref, error)
}

type AuthorizationFacade struct {
	Authorizations AuthorizationService
}

type AuthorizationService interface {
	GetByID(id string) (*oauth.Authorization, error)
	ListByUser(userID string, filters ...oauth.AuthorizationFilter) ([]*oauth.Authorization, error)
	Delete(a *oauth.Authorization) error
}

type CustomAttributesService interface {
	ReadCustomAttributesInStorageForm(role accesscontrol.Role, userID string, storageForm map[string]interface{}) (map[string]interface{}, error)
	UpdateAllCustomAttributes(role accesscontrol.Role, userID string, customAttrs map[string]interface{}) error
}

type EventService interface {
	DispatchEventOnCommit(payload event.Payload) error
}

type IdentityFacade struct {
	Identities  IdentityService
	Interaction InteractionService
}

type IdentityService interface {
	Get(id string) (*identity.Info, error)
	ListRefsByUsers(userIDs []string, identityType *apimodel.IdentityType) ([]*apimodel.IdentityRef, error)
}

type InteractionService interface {
	Perform(intent interaction.Intent, input interface{}) (*interaction.Graph, error)
}

type OAuthAuthorizationService interface {
	CheckAndGrant(
		clientID string,
		userID string,
		scopes []string,
	) (*oauth.Authorization, error)
}

type OAuthClientResolver interface {
	ResolveClient(clientID string) *config.OAuthClientConfig
}

type OAuthFacade struct {
	Config              *config.OAuthConfig
	Users               UserService
	Authorizations      OAuthAuthorizationService
	Tokens              OAuthTokenService
	Clock               clock.Clock
	OAuthClientResolver OAuthClientResolver
}

type OAuthTokenService interface {
	IssueOfflineGrant(
		client *config.OAuthClientConfig,
		opts handler.IssueOfflineGrantOptions,
		resp protocol.TokenResponse,
	) (*oauth.OfflineGrant, error)
	IssueAccessGrant(
		client *config.OAuthClientConfig,
		scopes []string,
		authzID string,
		userID string,
		sessionID string,
		sessionKind oauth.GrantSessionKind,
		resp protocol.TokenResponse,
	) error
}

type RolesGroupsCommands interface {
	CreateRole(options *rolesgroups.NewRoleOptions) (*model.Role, error)
	UpdateRole(options *rolesgroups.UpdateRoleOptions) (*model.Role, error)
	DeleteRole(id string) error

	CreateGroup(options *rolesgroups.NewGroupOptions) (*model.Group, error)
	UpdateGroup(options *rolesgroups.UpdateGroupOptions) (*model.Group, error)
	DeleteGroup(id string) error

	AddRoleToGroups(options *rolesgroups.AddRoleToGroupsOptions) (*model.Role, error)
	RemoveRoleFromGroups(options *rolesgroups.RemoveRoleFromGroupsOptions) (*model.Role, error)

	AddRoleToUsers(options *rolesgroups.AddRoleToUsersOptions) (*model.Role, error)
	RemoveRoleFromUsers(options *rolesgroups.RemoveRoleFromUsersOptions) (*model.Role, error)

	AddGroupToUsers(options *rolesgroups.AddGroupToUsersOptions) (*model.Group, error)
	RemoveGroupFromUsers(options *rolesgroups.RemoveGroupFromUsersOptions) (*model.Group, error)

	AddGroupToRoles(options *rolesgroups.AddGroupToRolesOptions) (*model.Group, error)
	RemoveGroupFromRoles(options *rolesgroups.RemoveGroupFromRolesOptions) (*model.Group, error)

	AddUserToRoles(options *rolesgroups.AddUserToRolesOptions) error
	RemoveUserFromRoles(options *rolesgroups.RemoveUserFromRolesOptions) error

	AddUserToGroups(options *rolesgroups.AddUserToGroupsOptions) error
	RemoveUserFromGroups(options *rolesgroups.RemoveUserFromGroupsOptions) error
}

type RolesGroupsFacade struct {
	RolesGroupsCommands RolesGroupsCommands
	RolesGroupsQueries  RolesGroupsQueries
}

type RolesGroupsQueries interface {
	GetRole(id string) (*model.Role, error)
	GetGroup(id string) (*model.Group, error)
	ListRoles(options *rolesgroups.ListRolesOptions, pageArgs graphqlutil.PageArgs) ([]model.PageItemRef, error)
	ListGroups(options *rolesgroups.ListGroupsOptions, pageArgs graphqlutil.PageArgs) ([]model.PageItemRef, error)
	ListGroupsByRoleID(roleID string) ([]*model.Group, error)
	ListRolesByGroupID(groupID string) ([]*model.Role, error)
	ListRolesByUserID(userID string) ([]*model.Role, error)
	ListGroupsByUserID(userID string) ([]*model.Group, error)
	ListUserIDsByRoleID(roleID string, pageArgs graphqlutil.PageArgs) ([]model.PageItemRef, error)
	ListUserIDsByGroupID(groupID string, pageArgs graphqlutil.PageArgs) ([]model.PageItemRef, error)
	ListEffectiveRolesByUserID(userID string) ([]*model.Role, error)
	ListAllUserIDsByGroupIDs(groupIDs []string) ([]string, error)
	ListAllUserIDsByGroupKeys(groupKeys []string) ([]string, error)
	ListAllUserIDsByRoleIDs(roleIDs []string) ([]string, error)
	ListAllUserIDsByEffectiveRoleIDs(roleIDs []string) ([]string, error)
	ListAllRolesByKeys(keys []string) ([]*model.Role, error)
	ListAllGroupsByKeys(keys []string) ([]*model.Group, error)
	CountRoles() (uint64, error)
	CountGroups() (uint64, error)
}

type SessionFacade struct {
	Sessions SessionManager
}

type SessionManager interface {
	List(userID string) ([]session.Session, error)
	Get(id string) (session.Session, error)
	RevokeWithEvent(session session.Session, isTermination bool, isAdminAPI bool) error
	TerminateAllExcept(userID string, currentSession session.Session, isAdminAPI bool) error
}

type StandardAttributesService interface {
	UpdateStandardAttributes(role accesscontrol.Role, userID string, stdAttrs map[string]interface{}) error
	DeriveStandardAttributes(role accesscontrol.Role, userID string, updatedAt time.Time, attrs map[string]interface{}) (map[string]interface{}, error)
}

type UserFacade struct {
	UserSearchService  UserSearchService
	Users              UserService
	StandardAttributes StandardAttributesService
	Interaction        InteractionService
}

type UserProfileFacade struct {
	User               UserService
	StandardAttributes StandardAttributesService
	CustomAttributes   CustomAttributesService
	Events             EventService
}

type UserSearchService interface {
	QueryUser(searchKeyword string,
		filterOptions user.FilterOptions,
		sortOption user.SortOption,
		pageArgs graphqlutil.PageArgs) ([]apimodel.PageItemRef, *libes.Stats, error)
}

type UserService interface {
	GetRaw(id string) (*user.User, error)
	Count() (uint64, error)
	QueryPage(listOption user.ListOptions, pageArgs graphqlutil.PageArgs) ([]apimodel.PageItemRef, error)
	Delete(userID string) error
	Disable(userID string, reason *string) error
	Reenable(userID string) error
	ScheduleDeletionByAdmin(userID string) error
	UnscheduleDeletionByAdmin(userID string) error
	Anonymize(userID string) error
	ScheduleAnonymizationByAdmin(userID string) error
	UnscheduleAnonymizationByAdmin(userID string) error
	CheckUserAnonymized(userID string) error
}

type VerificationFacade struct {
	Verification VerificationService
}

type VerificationService interface {
	GetClaims(userID string) ([]*verification.Claim, error)
	NewVerifiedClaim(userID string, claimName string, claimValue string) *verification.Claim
	MarkClaimVerified(claim *verification.Claim) error
	DeleteClaim(claim *verification.Claim) error
}