syntax = "proto3";

package auth;

option go_package = "rag/file-system/api/proto";

service AuthService {
  rpc ValidateToken (ValidateTokenRequest) returns (ValidateTokenResponse);
  rpc CheckPermission (CheckPermissionRequest) returns (CheckPermissionResponse);
}

message ValidateTokenRequest {
  string token = 1;
}

message ValidateTokenResponse {
  bool valid = 1;
  string user_id = 2;
  string username = 3;
  string email = 4;
  repeated string roles = 5;
  repeated string permissions = 6;
  int64 expires_at = 7;
}

message CheckPermissionRequest {
  string token = 1;
  string permission = 2;
}

message CheckPermissionResponse {
  bool allowed = 1;
  string user_id = 2;
  repeated string roles = 3;
}