auth

type APIToken struct {
	Token     string `json:"token" bson:"apikey"`
	UserEmail string `json:"email" bson:"email"`
}

type AuthenticationFailure struct {
	Message string
}

type ManagedScheme interface {
	UserScheme
	StartPasswordReset(ctx context.Context, user *User) error
	ResetPassword(ctx context.Context, user *User, resetToken string) error
	ChangePassword(ctx context.Context, token Token, oldPassword string, newPassword string) error
}

type MultiScheme interface {
	Infos(ctx context.Context) ([]authTypes.SchemeInfo, error)
}

type Scheme interface {
	Auth(ctx context.Context, token string) (Token, error)
	Info(ctx context.Context) (*authTypes.SchemeInfo, error)
}

type Token authTypes.Token

type User struct {
	Quota     quota.Quota
	Email     string
	Password  string
	APIKey    string
	Roles     []authTypes.RoleInstance `bson:",omitempty"`
	Groups    []string                 `bson:",omitempty"`
	FromToken bool                     `bson:",omitempty"`
	Disabled  bool                     `bson:",omitempty"`

	APIKeyLastAccess   time.Time `bson:"apikey_last_access"`
	APIKeyUsageCounter int64     `bson:"apikey_usage_counter"`
}

type UserScheme interface {
	Scheme

	Login(ctx context.Context, params map[string]string) (Token, error)
	Logout(ctx context.Context, token string) error
	Create(ctx context.Context, user *User) (*User, error)
	Remove(ctx context.Context, user *User) error
}