auth

type App struct {
	Config          *Config
	Logger          Logger
	Auth            AuthService
	Token           TokenService
	ResponseHandler ResponseHandler
}

type AuthService interface {
	Login(identifier, password string) (*LoginResponse, error)
	Logout(userID uuid.UUID, refreshToken string) error
	RefreshToken(refreshToken string) (*LoginResponse, error)
	ValidateToken(token string) (*TokenClaims, error)
	MarkEmailVerified(userID uuid.UUID) error
}

type Config struct {
	JWT struct {
		Secret          string
		AccessTokenTTL  time.Duration
		RefreshTokenTTL time.Duration
	}
	Password struct {
		MinLength  int
		MaxLength  int
		MinDigits  int
		MinSymbols int
	}
}

type Handler struct {
	// contains filtered or unexported fields
}

type JWTService struct {
	// contains filtered or unexported fields
}

type Logger interface {
	LogInfo(msg string, fields map[string]interface{})
	LogError(err error, msg string) error
}

type LoginRequest struct {
	// User email address
	Email string `json:"email" binding:"required,email" example:"user@example.com"`
	// User password
	Password string `json:"password" binding:"required,min=8" example:"Pass123!"`
}

type LoginResponse struct {
	// User information
	User User `json:"user"`
	// JWT access token
	AccessToken string `json:"accessToken" example:"eyJhbGciOiJIUzI1NiIs..."`
	// JWT refresh token
	RefreshToken string `json:"refreshToken" example:"eyJhbGciOiJIUzI1NiIs..."`
	// Token type (always "Bearer")
	TokenType string `json:"tokenType" example:"Bearer"`
	// Token expiration time in seconds
	ExpiresIn int `json:"expiresIn" example:"3600"`
}

type RefreshToken struct {
	ID        uuid.UUID  `gorm:"type:uuid;primary_key;default:gen_random_uuid()" json:"id"`
	UserID    uuid.UUID  `gorm:"type:uuid;not null" json:"userId"`
	Token     string     `gorm:"unique;not null" json:"token"`
	ExpiresAt time.Time  `json:"expiresAt"`
	CreatedAt time.Time  `json:"createdAt"`
	RevokedAt *time.Time `json:"revokedAt,omitempty"`
}

type RefreshTokenRepository struct {
	// contains filtered or unexported fields
}

type RefreshTokenRequest struct {
	// Valid refresh token
	RefreshToken string `json:"refreshToken" binding:"required" example:"eyJhbGciOiJIUzI1NiIs..."`
}

type RefreshTokenService interface {
	Create(userID uuid.UUID, token string, expiresAt time.Time) error
	GetByToken(token string) (*RefreshToken, error)
	RevokeByToken(token string) error
	RevokeAllUserTokens(userID uuid.UUID) error
	DeleteExpired() error
}

type RegisterRequest struct {
	// Unique username
	Username string `json:"username" binding:"required" example:"johndoe"`
	// User email address
	Email string `json:"email" binding:"required,email" example:"user@example.com"`
	// User password (min 8 characters)
	Password string `json:"password" binding:"required,min=6" example:"Pass123!"`
	// User's full name
	Name string `json:"name" example:"John Doe"`
}

type ResponseHandler interface {
	SuccessResponse(c *gin.Context, data interface{}, message string)
	ErrorResponse(c *gin.Context, status int, code, message string, err error)
	ValidationErrorResponse(c *gin.Context, field, message string)
	UnauthorizedResponse(c *gin.Context, message string)
	ForbiddenResponse(c *gin.Context, message string)
	NotFoundResponse(c *gin.Context, message string)
	InternalErrorResponse(c *gin.Context, message string, err error)
}

type Service struct {
	// contains filtered or unexported fields
}

type TokenClaims struct {
	// User ID
	UserID string `json:"userId" example:"550e8400-e29b-41d4-a716-446655440000"`
	// User email
	Email string `json:"email" example:"user@example.com"`
	jwt.RegisteredClaims
}

type TokenService interface {
	GenerateAccessToken(user *User) (string, error)
	GenerateRefreshToken(user *User) (string, error)
	ValidateAccessToken(token string) (*TokenClaims, error)
	ValidateRefreshToken(token string) (*TokenClaims, error)
}

type User struct {
	// Unique user ID
	ID uuid.UUID `gorm:"type:uuid;primary_key;default:gen_random_uuid()" json:"id" example:"550e8400-e29b-41d4-a716-446655440000"`
	// Unique username
	Username string `gorm:"unique;not null" json:"username" example:"johndoe"`
	// User email address
	Email string `gorm:"unique;not null" json:"email" example:"user@example.com"`
	// Password hash (not exposed in JSON)
	Password string `gorm:"not null" json:"-"`
	// User's full name
	Name string `json:"name" example:"John Doe"`
	// Whether email is verified
	EmailVerified bool `gorm:"default:false" json:"emailVerified" example:"true"`
	// Last login timestamp
	LastLoginAt time.Time `json:"lastLoginAt,omitempty"`
	// Whether account is active
	Active bool `gorm:"default:true" json:"active" example:"true"`
	// Account creation timestamp
	CreatedAt time.Time `json:"createdAt"`
	// Last update timestamp
	UpdatedAt time.Time `json:"updatedAt"`
	// Refresh tokens (not exposed in JSON)
	RefreshTokens []RefreshToken `gorm:"foreignKey:UserID" json:"-"`
}