auth

type IdsecAuth interface {
	// AuthenticatorName returns the name of the authenticator.
	AuthenticatorName() string
	// AuthenticatorHumanReadableName returns a human-readable name for the authenticator.
	AuthenticatorHumanReadableName() string
	// SupportedAuthMethods returns a list of supported authentication methods.
	SupportedAuthMethods() []auth.IdsecAuthMethod
	// IsAuthenticated checks if the authentication is already loaded for the specified profile.
	IsAuthenticated(profile *models.IdsecProfile) bool
	// DefaultAuthMethod returns the default authentication method and its settings.
	DefaultAuthMethod() (auth.IdsecAuthMethod, auth.IdsecAuthMethodSettings)
	// LoadAuthentication loads the authentication token for the specified profile and refreshes it if necessary.
	// It returns the authentication token and an error if any occurred.
	LoadAuthentication(profile *models.IdsecProfile, refreshAuth bool) (*auth.IdsecToken, error)
	// Authenticate performs authentication using the specified profile and authentication profile.
	// If profile is not passed (nil), will try to use the auth profile alone, but at least one of them needs to be passed
	// Secret may optionally be passed if needed for the authentication type
	// If force is true, it will force re-authentication even if a valid token is already present
	// If refreshAuth is true, it will attempt to refresh the token if it is expired
	// It returns the authentication token and an error if any occurred.
	Authenticate(profile *models.IdsecProfile, authProfile *auth.IdsecAuthProfile, secret *auth.IdsecSecret, force bool, refreshAuth bool) (*auth.IdsecToken, error)
	// contains filtered or unexported methods
}

type IdsecAuthBase struct {
	Authenticator       IdsecAuth
	Logger              *common.IdsecLogger
	CacheAuthentication bool
	CacheKeyring        keyring.IdsecKeyringInterface
	Token               *auth.IdsecToken
	ActiveProfile       *models.IdsecProfile
	ActiveAuthProfile   *auth.IdsecAuthProfile
}

type IdsecISPAuth struct {
	IdsecAuth
	*IdsecAuthBase
}