middleware

type CompressionConfig struct {
	// Compression level (1-9, default: 6)
	Level int
	// Minimum content length to compress (default: 1024 bytes)
	MinLength int
	// Content types to compress
	ContentTypes []string
	// Exclude paths from compression
	ExcludePaths []string
}

type MetricsObserver interface {
	OnAllow(route string, key string)
	OnDeny(route string, key string)
}

type OperationLog struct {
	ID              uint      `gorm:"primaryKey" json:"id"`
	UserID          uint      `gorm:"not null" json:"user_id"`          // User ID who performed the operation
	Username        string    `gorm:"not null" json:"username"`         // Username who performed the operation
	Action          string    `gorm:"not null" json:"action"`           // Operation type (e.g., create, delete, update)
	Target          string    `gorm:"not null" json:"target"`           // Operation target (e.g., user, order)
	Details         string    `gorm:"not null" json:"details"`          // Operation detailed description
	IPAddress       string    `gorm:"not null" json:"ip_address"`       // User IP address
	UserAgent       string    `gorm:"not null" json:"user_agent"`       // User browser information
	Referer         string    `gorm:"not null" json:"referer"`          // Request referer page
	Device          string    `gorm:"not null" json:"device"`           // User device (mobile, desktop, etc.)
	Browser         string    `gorm:"not null" json:"browser"`          // Browser information (e.g., Chrome, Firefox)
	OperatingSystem string    `gorm:"not null" json:"operating_system"` // Operating system (e.g., Windows, MacOS)
	Location        string    `gorm:"not null" json:"location"`         // User geographic location
	RequestMethod   string    `gorm:"not null" json:"request_method"`   // HTTP request method (GET, POST, etc.)
	CreatedAt       time.Time `json:"created_at"`                       // Operation time
}

type OperationLogConfig struct {
	// Whether to enable operation logging
	Enabled bool
	// Whether to log query operations
	LogQueries bool
	// Important operation patterns
	ImportantPatterns map[string][]string
	// Unimportant POST operations
	UnimportantPostPaths []string
	// System internal operation paths
	SystemInternalPaths []string
	// Operation description mapping
	OperationDescriptions map[string]string
}

type PrebuiltStoreFactory struct{ Store limiter.Store }

type PrometheusObserver struct {
	// contains filtered or unexported fields
}

type RateLimiter struct {
	// contains filtered or unexported fields
}

type RateLimiterConfig struct {
	Rate           string            `json:"rate"`            // e.g. "100-M", "1000-H"
	PerRouteRates  map[string]string `json:"per_route_rates"` // 路由覆盖速率
	Identifier     string            `json:"identifier"`      // ip|user|header|ip+route
	HeaderName     string            `json:"header_name"`     // 当 identifier=header 时使用
	WhitelistCIDRs []string          `json:"whitelist_cidrs"`
	BlacklistCIDRs []string          `json:"blacklist_cidrs"`
	WhitelistUsers []string          `json:"whitelist_users"`
	BlacklistUsers []string          `json:"blacklist_users"`
	SkipPaths      []string          `json:"skip_paths"`
	AddHeaders     bool              `json:"add_headers"`
	DenyStatus     int               `json:"deny_status"` // 默认 429
	DenyMessage    string            `json:"deny_message"`
}

type SecurityConfig struct {
	// CSRF配置
	CSRFSecret    string            `json:"csrf_secret"`
	CSRFTokenName string            `json:"csrf_token_name"`
	CSRFMaxAge    time.Duration     `json:"csrf_max_age"`
	CSRFSecure    bool              `json:"csrf_secure"`
	CSRFHttpOnly  bool              `json:"csrf_http_only"`
	CSRFSameSite  csrf.SameSiteMode `json:"csrf_same_site"`

	// XSS配置
	XSSProtection      bool   `json:"xss_protection"`
	ContentTypeNosniff bool   `json:"content_type_nosniff"`
	XFrameOptions      string `json:"x_frame_options"`

	// 输入验证配置
	MaxRequestSize int64    `json:"max_request_size"`
	AllowedOrigins []string `json:"allowed_origins"`

	// 安全头配置
	HSTSMaxAge     int    `json:"hsts_max_age"`
	ReferrerPolicy string `json:"referrer_policy"`
}

type StoreFactory interface {
	Create() limiter.Store
}

type UserInfo struct {
	ID          uint   // User ID
	DisplayName string // User display name
}