authkit initial

principal.go

@@ -0,0 +1,63 @@
+package authkit
+
+import (
+	"time"
+
+	"github.com/google/uuid"
+)
+
+type AuthMethod string
+
+const (
+	AuthMethodSession AuthMethod = "session"
+	AuthMethodJWT     AuthMethod = "jwt"
+	AuthMethodAPIKey  AuthMethod = "api_key"
+)
+
+type Principal struct {
+	UserID      uuid.UUID
+	Method      AuthMethod
+	SessionID   []byte
+	APIKeyID    []byte
+	Roles       []string
+	Permissions []string
+	Abilities   []string
+	IssuedAt    time.Time
+	ExpiresAt   time.Time
+}
+
+func (p *Principal) HasRole(name string) bool {
+	for _, r := range p.Roles {
+		if r == name {
+			return true
+		}
+	}
+	return false
+}
+
+func (p *Principal) HasAnyRole(names ...string) bool {
+	for _, n := range names {
+		if p.HasRole(n) {
+			return true
+		}
+	}
+	return false
+}
+
+func (p *Principal) HasPermission(name string) bool {
+	for _, perm := range p.Permissions {
+		if perm == name {
+			return true
+		}
+	}
+	return false
+}
+
+func (p *Principal) HasAbility(name string) bool {
+	for _, a := range p.Abilities {
+		if a == name {
+			return true
+		}
+	}
+	return false
+}