iam

type Action string

type AllowAll struct{}

type AllowNone struct{}

type Guard interface {
	Check(context.Context, Action, core.Path) error
}

type OAuthStore interface {
	// AddProvider adds an OAuth provider to a user
	AddProvider(ctx context.Context, userID core.ID, provider, providerID string) error
	GetUserByProvider(ctx context.Context, provider, providerID string) (*User, error)
}

type PasswordHash struct {
	// contains filtered or unexported fields
}

type PasswordStore interface {
	SetHash(ctx context.Context, userID core.ID, hash PasswordHash) error
	GetHash(ctx context.Context, userID core.ID) (PasswordHash, error)
}

type Principal interface {
	PrincipalID() core.ID
}

type SessionReader interface {
	Get(ctx context.Context) (core.ID, error)
}

type SessionStore interface {
	SessionReader
	Put(ctx context.Context, id core.ID) error
	Destroy(ctx context.Context) error
}

type User struct {
	ID    core.ID
	Email string
}

type UserStore interface {
	Save(ctx context.Context, user *User) (created bool, err error)

	// GetUserByEmail gets a user by email.
	// Returns core.ErrNotFound if user doesn't exist
	GetByEmail(ctx context.Context, email string) (*User, error)

	// Get gets a user by ID.
	// Returns core.ErrNotFound if user doesn't exist
	Get(ctx context.Context, id core.ID) (*User, error)
}