console

type Attempts interface {
	// Allow takes one attempt from addr; refused, it is how long to wait.
	Allow(ctx context.Context, addr string) (time.Duration, error)
	// Failed records a wrong token from anywhere.
	Failed(ctx context.Context) error
	// Succeeded resets the global backoff.
	Succeeded(ctx context.Context) error
}

type Console struct {
	deps.Component
	// contains filtered or unexported fields
}

type LoginLimits struct {
	// Every address has Burst attempts per Window.
	Burst  int
	Window time.Duration
	// After Threshold failures (any address, none older than Forget apart)
	// every login waits Base, doubling per further failure up to Max; a
	// success resets it.
	Threshold int
	Base, Max time.Duration
	Forget    time.Duration
}

type Option func(o *options)

type PG struct {
	// contains filtered or unexported fields
}

type PGAttempts struct {
	// contains filtered or unexported fields
}

type Session struct {
	ID         uuid.UUID
	CreatedAt  time.Time
	ExpiresAt  time.Time
	LastSeenAt time.Time
	Address    string
	UserAgent  string
}

type Sessions interface {
	// Create stores a session under the hash of its token; s.ID is ignored
	// and the new id returned.
	Create(ctx context.Context, tokenHash []byte, s Session) (uuid.UUID, error)
	// ByToken finds a session by the hash of its token; ErrNoSession.
	ByToken(ctx context.Context, tokenHash []byte) (Session, error)
	// Get finds a session by id; ErrNoSession.
	Get(ctx context.Context, id uuid.UUID) (Session, error)
	// Touch moves last seen forward to at (never back).
	Touch(ctx context.Context, id uuid.UUID, at time.Time) error
	// List is every session, newest first.
	List(ctx context.Context) ([]Session, error)
	// Delete removes a session; false when there was none.
	Delete(ctx context.Context, id uuid.UUID) (bool, error)
	// DeleteOthers removes every session but keep and reports how many.
	DeleteOthers(ctx context.Context, keep uuid.UUID) (int64, error)
	// DeleteStale removes sessions expired at now or idle since idleSince.
	DeleteStale(ctx context.Context, now, idleSince time.Time) (int64, error)
}

type Settings struct {
	// Listen is the console's own listener (":8081"); empty: none (the
	// Handler is served by someone else, e.g. a test server).
	Listen string
	// Prefix the console is mounted under ("/backplane"); empty: "/".
	Prefix string
	// Origins allowed to open /ws and to log in (scheme://host[:port]);
	// empty: the request's own host.
	Origins []string
	// TrustedProxies whose X-Forwarded-For names the client (addresses,
	// CIDRs): deployment-owned proxy addresses.
	TrustedProxies []string
	// InsecureCookie drops Secure from the session cookie and HSTS from the
	// responses: plain-HTTP development only.
	InsecureCookie bool
	// AdminToken is what /auth/login accepts: configuration of the
	// deployment, at least MinAdminTokenLen characters.
	AdminToken config.Secret
	// InternalSecret is presented to the services' platform ports
	// (relay and bundles).
	InternalSecret config.Secret
}