auth

type AuthResult struct {
	User      *db.User
	Addresses []AuthenticatedAddress
	Email     *persist.Email
	PrivyDID  *string
}

type AuthTokenClaims struct {
	UserID    persist.DBID   `json:"user_id"`
	SessionID persist.DBID   `json:"session_id"` // The session this auth token belongs to
	RefreshID string         `json:"refresh_id"` // The refresh token this auth token was generated from
	Roles     []persist.Role `json:"roles"`
	GalleryClaims
}

type AuthenticatedAddress struct {
	// A ChainAddress that has had its ownership successfully verified by an authenticator
	ChainAddress persist.ChainAddress

	// The WalletType of the verified ChainAddress
	WalletType persist.WalletType
}

type Authenticator interface {
	// GetDescription returns information about the authenticator for error and logging purposes.
	// NOTE: GetDescription should NOT include any sensitive data (passwords, auth tokens, etc)
	// that we wouldn't want showing up in logs!
	GetDescription() string

	Authenticate(context.Context) (*AuthResult, error)
}

type ErrAuthenticationFailed struct {
	WrappedErr error
}

type ErrDoesNotOwnRequiredNFT struct {
	// contains filtered or unexported fields
}

type ErrNonceNotFound struct {
	L1ChainAddress persist.L1ChainAddress
}

type ErrSignatureVerificationFailed struct {
	WrappedErr error
}

type GalleryClaims struct {
	TokenType TokenType `json:"token_type"`
	jwt.RegisteredClaims
}

type MagicLinkAuthenticator struct {
	Token       token.Token
	MagicClient *magicclient.API
	Queries     *db.Queries
}

type NeynarAuthenticator struct {
	CustodyAuth    NonceAuthenticator
	PrimaryAddress *persist.ChainPubKey
	NeynarClient   *farcaster.NeynarAPI
	Queries        *db.Queries
}

type NonceAuthenticator struct {
	ChainPubKey        persist.ChainPubKey
	Nonce              string
	Message            string
	Signature          string
	WalletType         persist.WalletType
	EthClient          *ethclient.Client
	MultichainProvider *multichain.Provider
	Queries            *db.Queries
}

type OneTimeLoginTokenAuthenticator struct {
	ConsumedTokenCache *redis.Cache
	Queries            *db.Queries
	LoginToken         string
}

type RefreshTokenClaims struct {
	ID        string       `json:"id"`        // The refresh token's ID
	ParentID  string       `json:"parent_id"` // The parent refresh token this child refresh token was generated from
	UserID    persist.DBID `json:"user_id"`
	SessionID persist.DBID `json:"session_id"` // The session this refresh token belongs to
	GalleryClaims
}

type TokenType string