security

type AccessControl struct {
	// contains filtered or unexported fields
}

type AuditEvent struct {
	ID        string
	Type      string
	Principal *Principal
	Resource  string
	Action    string
	Result    string
	Error     error
	Metadata  map[string]interface{}
	Timestamp time.Time
	Source    string
}

type AuditStore interface {
	SaveEvent(ctx context.Context, event *AuditEvent) error
	QueryEvents(ctx context.Context, filter *AuditFilter) ([]*AuditEvent, error)
	GetEventByID(ctx context.Context, id string) (*AuditEvent, error)
	DeleteEvents(ctx context.Context, filter *AuditFilter) error
}

type Auditor struct {
	// contains filtered or unexported fields
}

type AuthProvider interface {
	Authenticate(ctx context.Context, credentials interface{}) (*Principal, error)
	Validate(ctx context.Context, token string) (*Principal, error)
	Revoke(ctx context.Context, token string) error
}

type AuthService struct {
	// contains filtered or unexported fields
}

type Condition interface {
	Evaluate(ctx context.Context, principal *Principal) bool
}

type Crypto struct {
	// contains filtered or unexported fields
}

type CryptoConfig struct {
	// 默认算法
	DefaultAlgorithm string
	// 密钥轮换周期
	KeyRotationPeriod time.Duration
	// 密钥大小
	KeySize int
	// 加密选项
	Options CryptoOptions
}

type CryptoProvider interface {
	// 加密
	Encrypt(plaintext []byte, key []byte) ([]byte, error)
	// 解密
	Decrypt(ciphertext []byte, key []byte) ([]byte, error)
	// 生成密钥
	GenerateKey(size int) ([]byte, error)
}

type EffectType string

type Permission struct {
	ID         string
	Resource   string
	Action     string
	Effect     EffectType
	Conditions []Condition
	Priority   int
	ExpireAt   time.Time
}

type Policy struct {
	ID          string
	Name        string
	Description string
	Effect      EffectType
	Principals  []string
	Resources   []string
	Actions     []string
	Conditions  []Condition
	Priority    int
	Version     int64
	Created     time.Time
	Modified    time.Time
}

type PolicyStore interface {
	GetPolicy(ctx context.Context, id string) (*Policy, error)
	ListPolicies(ctx context.Context, filter *PolicyFilter) ([]*Policy, error)
	CreatePolicy(ctx context.Context, policy *Policy) error
	UpdatePolicy(ctx context.Context, policy *Policy) error
	DeletePolicy(ctx context.Context, id string) error
}

type Principal struct {
	ID        string
	Type      string
	Name      string
	Roles     []string
	Groups    []string
	Metadata  map[string]interface{}
	Created   time.Time
	LastLogin time.Time
}

type SecurityLevel int

type Token struct {
	ID        string
	Type      string
	Principal *Principal
	Claims    map[string]interface{}
	IssuedAt  time.Time
	ExpireAt  time.Time
	Metadata  map[string]string
}

type TokenManager struct {
	// contains filtered or unexported fields
}