nsecurity

type AuthTicket struct {
	ClientType string
	RequestID  string
	Token      string
	Subject    string
	Timestamp  string
	Signature  string
}

type JWTConfig struct {
	JWTPublicKey  string `yaml:"jwtPublicKey"`
	JWTPrivateKey string `yaml:"jwtPrivateKey"`
}

type JWTOper interface {
	IssueToken(subject string, expiration time.Time, set map[string]interface{}) (string, error)

	ParseToken(token string) (*JWTPayload, error)

	ValidateToken(token string) (*JWTPayload, error)
}

type JWTPayload struct {
	Subject string
	Expires time.Time
	Set     map[string]interface{}
}

type ReplayChecker interface {
	VerifyReplay(requestID string) error
}

type SecurityConfig struct {
	JWT                *JWTConfig    `yaml:"jwt"`
	SignKeyLifeTime    time.Duration `yaml:"signKeyLifeTime"`
	RefreshSignKeyLife bool          `yaml:"refreshSignKeyLife"`
	TimeWindow         time.Duration `yaml:"timeWindow"`
	Anons              []string      `yaml:"anons"`
	Model              string        `yaml:"model"`
	Policies           []string      `yaml:"policies"`
}

type SignKeyStore interface {
	Store(clientType, subject, signKey string) error
	Get(clientType, subject string) (string, error)
}