iam

type AccessTokenClaims struct {
	jwt.Claims

	AuthorizedParty string `json:"azp,omitempty"`
	SubType         string `json:"sub_type,omitempty"`
	TerminalID      string `json:"terminal_id,omitempty"`
}

type Actor struct {
	// UserID is the ID of the user who performed the action. This might be
	// empty if the action was performed by non-user-representing agent.
	UserID UserID
	// TerminalID is the ID of the terminal where the action was initiated
	// from.
	TerminalID TerminalID
}

type App struct {
	app.App
	ServiceClient
}

type Authorization struct {
	// If this context is an assumed context, this field
	// holds info about the assuming context.
	AssumingAuthorization *Authorization `json:"assuming_authorization,omitempty"`

	// AuthorizationID holds the ID of the token where
	// this context was loaded from. An AuthorizationID is unique across
	// the system and could be used as session identifier.
	AuthorizationID AuthorizationID `json:"jti,omitempty"`

	// If the authorized party represents a user, this
	// filed holds the ID of the authorized user.
	UserID UserID `json:"sub,omitempty"`
	// contains filtered or unexported fields
}

type AuthorizationID struct {
	TerminalID TerminalID
	InstanceID AuthorizationInstanceID
}

type AuthorizationInstanceID int64

type CallContext interface {
	api.CallContext
	Authorization() Authorization
	IsUserContext() bool
}

type Client struct {
	ID                ClientID
	DisplayName       string
	Secret            string
	PlatformType      string // only for user-agent types
	RequiredScopes    []string
	OAuth2RedirectURI []string
}

type ClientDataProvider interface {
	GetClient(id ClientID) (*Client, error)
}

type ClientID int32

type EmailAddress struct {
	// contains filtered or unexported fields
}

type Error struct {
	Msg string
	Err error
}

type GRPCCallContext struct {
	CallContext
}

type GRPCServiceClient interface {
	// AuthorizedOutgoingGRPCContext returns a new instance of Context with
	// authorization information set. If baseContext is valid, this method
	// will use it as the parent context, otherwise, this method will create
	// a Background context.
	AuthorizedOutgoingGRPCContext(
		baseContext context.Context,
	) context.Context
}

type GRPCServiceClientServer interface {
	// GRPCCallContext loads authorization context from
	// gRPC call context.
	GRPCCallContext(
		grpcContext context.Context,
	) (*GRPCCallContext, error)
}

type IAMService interface {
	ServiceClient

	UserService

	TerminalService

	// This below is reserverd for S2S services.
	UserTerminalService
}

type JWTKeyChain struct {
	// contains filtered or unexported fields
}

type OAuth2AuthorizePostResponse struct {
	RedirectURI string `json:"redirect_uri"`
}

type OAuth2TokenResponse struct {
	oauth2.TokenResponse

	UserID string `json:"user_id,omitempty" schema:"user_id,omitempty"`

	TerminalID     string `json:"terminal_id,omitempty" schema:"terminal_id,omitempty"`
	TerminalSecret string `json:"terminal_secret,omitempty" schema:"terminal_secret,omitempty"`
}

type PhoneNumber struct {
	// contains filtered or unexported fields
}

type ProjectID int32

type RESTRequestContext struct {
	CallContext
	Request *http.Request
}

type RESTServiceClient interface {
	// AuthorizedOutgoingHTTPRequestHeader returns a new instance of http.Header
	// with authorization information set. If baseHeader is proivded, this method
	// will merge it into the returned value.
	AuthorizedOutgoingHTTPRequestHeader(
		baseHeader http.Header,
	) http.Header
}

type RESTServiceClientServer interface {
	// RESTRequestContext returns a RESTRequestContext instance for the request.
	// This function will always return an instance even if there's an error.
	RESTRequestContext(*http.Request) (*RESTRequestContext, error)
}

type RefreshTokenClaims struct {
	ExpiresAt      int64  `json:"exp,omitempty"`
	NotBefore      int64  `json:"nbf,omitempty"`
	TerminalID     string `json:"terminal_id,omitempty"`
	TerminalSecret string `json:"terminal_secret,omitempty"`
}

type ServiceClient interface {
	ServiceClientServer

	GRPCServiceClient
	RESTServiceClient

	ServiceClientAuth

	// ServerBaseURL returns the base URL of the IAM server this client
	// will connect to.
	ServerBaseURL() string

	// TerminalID returns the terminal ID of the client instance after
	// successful authentication with IAM server.
	TerminalID() TerminalID
}

type ServiceClientAuth interface {
	// AuthenticateServiceClient authenticates current application as a
	// service which will grant access to S2S API as configured on the
	// IAM service server.
	AuthenticateServiceClient(
		serviceInstanceID string,
	) (terminalID TerminalID, err error)

	// AccessTokenByAuthorizationCodeGrant obtains access token by providing
	// authorization code returned from a 3-legged authorization flow
	// (the authorization code flow).
	AccessTokenByAuthorizationCodeGrant(
		authorizationCode string,
	) (accessToken string, err error)
}

type ServiceClientConfig struct {
	ServerBaseURL string                   `env:",required"`
	Credentials   ServiceClientCredentials `env:",squash"`
}

type ServiceClientCore struct {
	ServiceClientServer
	// contains filtered or unexported fields
}

type ServiceClientCredentials struct {
	ClientID     string `env:",required"`
	ClientSecret string
}

type ServiceClientServer interface {
	// AuthorizationFromJWTString loads authorization context from a JWT
	// string.
	AuthorizationFromJWTString(
		jwtStr string,
	) (*Authorization, error)

	// JWTKeyChain returns instance of key chain used to sign JWT tokens.
	JWTKeyChain() *JWTKeyChain

	GRPCServiceClientServer
	RESTServiceClientServer
}

type ServiceClientServerCore struct {
	// contains filtered or unexported fields
}

type TerminalID int64

type TerminalIDFirebaseInstanceToken struct {
	TerminalID   TerminalID
	PlatformType string
	Token        string
}

type TerminalInfo struct {
	DisplayName    string
	AcceptLanguage []language.Tag
}

type TerminalRegisterPostRequestJSONV1 struct {
	DisplayName              string   `json:"display_name"`
	VerificationResourceType string   `json:"verification_resource_type,omitempty"`
	VerificationResourceName string   `json:"verification_resource_name"`
	VerificationMethods      []string `json:"verification_methods"`
}

type TerminalRegisterPostResponseJSONV1 struct {
	TerminalID     string     `json:"terminal_id"`
	TerminalSecret string     `json:"terminal_secret,omitempty"`
	CodeExpiry     *time.Time `json:"code_expiry,omitempty"`
}

type TerminalSecretPostRequestJSONV1 struct {
	TerminalID string `json:"terminal_id"`
	Code       string `json:"code"`
}

type TerminalSecretPostResponseJSONV1 struct {
	Secret string `json:"secret"`
}

type TerminalService interface {
	GetTerminalInfo(
		callCtx CallContext,
		terminalID TerminalID,
	) (*TerminalInfo, error)
}

type UserAccountDeleteInput struct {
	DeletionNotes string
}

type UserAccountService interface {
	// IsUserIDRegistered is to check if the user ID is trully registered to
	// system.
	IsUserIDRegistered(userID UserID) bool

	UserAccountStateService

	// DeleteUserAccount deletes an user account based identfied by userIDToDelete.
	DeleteUserAccount(
		callCtx CallContext,
		userIDToDelete UserID,
		input UserAccountDeleteInput,
	) (deleted bool, err error)
}

type UserAccountState struct {
	Deleted bool
}

type UserAccountStateService interface {
	// GetUserAccountState checks if the provided user ID is valid and whether
	// the account is deleted.
	//
	// This method returns nil if the userID is not referencing to any valid
	// user account.
	GetUserAccountState(

		userID UserID,
	) (*UserAccountState, error)
}

type UserAccountStateServiceClientCore struct {
}

type UserBaseProfile struct {
	ID              UserID
	DisplayName     string
	ProfileImageURL string
	IsDeleted       bool
}

type UserContactListsJSONV1 struct {
	Items []UserJSONV1 `json:"items"`
}

type UserEmailAddressPutRequestJSONV1 struct {
	IsPrimary bool `json:"is_primary" db:"is_primary"`
}

type UserID int64

type UserJSONV1 struct {
	ID              string `json:"id"`
	DisplayName     string `json:"display_name"`
	ProfileImageURL string `json:"profile_image_url"`
	PhoneNumber     string `json:"phone_number,omitempty"`
	EmailAddress    string `json:"email_address,omitempty"`
}

type UserPhoneNumber struct {
	UserID      UserID
	PhoneNumber PhoneNumber
	IsPrimary   bool
}

type UserPhoneNumberJSONV1 struct {
	UserID      string `json:"user_id"`
	PhoneNumber string `json:"phone_number"`
}

type UserPhoneNumberListJSONV1 struct {
	Items []UserPhoneNumberJSONV1 `json:"items"`
}

type UserProfileService interface {
	GetUserInfoV1(
		callCtx CallContext,
		userID UserID,
	) (*iampb.UserInfoData, error)
	GetUserBaseProfile(
		callCtx CallContext,
		userID UserID,
	) (*UserBaseProfile, error)
}

type UserService interface {
	UserAccountService
	UserProfileService

	GetUserPrimaryPhoneNumber(
		callCtx CallContext,
		userID UserID,
	) (*PhoneNumber, error)

	GetUserPrimaryEmailAddress(
		callCtx CallContext,
		userID UserID,
	) (*EmailAddress, error)
}

type UserTerminalService interface {
	ListUserTerminalIDFirebaseInstanceTokens(
		ownerUserID UserID,
	) ([]TerminalIDFirebaseInstanceToken, error)
	DeleteUserTerminalFCMRegistrationToken(
		authCtx *Authorization,
		userID UserID, terminalID TerminalID, token string,
	) error
}

type WebUIURLs struct {
	SignIn string `env:"SIGNIN"`
}