auth

type APIKeyAuthenticator struct {
	// contains filtered or unexported fields
}

type APIKeyInfo struct {
	Key       string         `json:"key"`
	UserID    string         `json:"user_id"`
	Name      string         `json:"name"`
	Roles     []string       `json:"roles"`
	ExpiresAt *time.Time     `json:"expires_at,omitempty"`
	CreatedAt time.Time      `json:"created_at"`
	LastUsed  *time.Time     `json:"last_used,omitempty"`
	Metadata  map[string]any `json:"metadata,omitempty"`
}

type APIKeyStore interface {
	// Get 获取 API Key 信息
	Get(ctx context.Context, key string) (*APIKeyInfo, error)

	// Create 创建新的 API Key
	Create(ctx context.Context, info *APIKeyInfo) error

	// Delete 删除 API Key
	Delete(ctx context.Context, key string) error

	// List 列出用户的所有 API Keys
	List(ctx context.Context, userID string) ([]*APIKeyInfo, error)
}

type AuthMethod string

type Authenticator interface {
	// Authenticate 验证凭证并返回用户信息
	Authenticate(ctx context.Context, credentials any) (*User, error)

	// Validate 验证令牌是否有效
	Validate(ctx context.Context, token string) (*User, error)

	// Method 返回认证方法类型
	Method() AuthMethod
}

type JWTAuthenticator struct {
	// contains filtered or unexported fields
}

type JWTClaims struct {
	jwt.RegisteredClaims

	UserID   string   `json:"user_id"`
	Username string   `json:"username"`
	Email    string   `json:"email"`
	Roles    []string `json:"roles"`
}

type JWTConfig struct {
	SecretKey      string
	Issuer         string
	ExpiryDuration time.Duration
}

type Manager struct {
	// contains filtered or unexported fields
}

type MemoryAPIKeyStore struct {
	// contains filtered or unexported fields
}

type Permission struct {
	Resource string   `json:"resource"` // e.g., "agents", "workflows"
	Actions  []string `json:"actions"`  // e.g., ["create", "read", "update", "delete"]
}

type RBAC struct {
	// contains filtered or unexported fields
}

type Role struct {
	Name        string       `json:"name"`
	Description string       `json:"description,omitempty"`
	Permissions []Permission `json:"permissions"`
}

type TokenInfo struct {
	Token     string         `json:"token"`
	ExpiresAt time.Time      `json:"expires_at"`
	User      *User          `json:"user,omitempty"`
	Metadata  map[string]any `json:"metadata,omitempty"`
}

type User struct {
	ID       string         `json:"id"`
	Username string         `json:"username"`
	Email    string         `json:"email"`
	Roles    []string       `json:"roles"`
	Metadata map[string]any `json:"metadata,omitempty"`
}