namespace Svrnty.CQRS.Altcha.Grpc;

/// <summary>
/// Configuration for <see cref="AltchaGrpcVerifier"/> and
/// <see cref="AltchaGrpcChallengeProvider"/>. Bind from configuration
/// (e.g. <c>"Altcha"</c> section) or pass via the registration delegate.
/// </summary>
public sealed class AltchaGrpcOptions
{
    /// <summary>
    /// gRPC endpoint of the altcha service. Typically the internal
    /// docker / k8s address — e.g. <c>http://altcha:9090</c> or
    /// <c>https://altcha.planb.svc.cluster.local:9090</c>.
    /// </summary>
    public string Endpoint { get; set; } = string.Empty;

    /// <summary>
    /// Optional per-call HMAC service-token provider. When set, the
    /// returned string is sent as <c>Authorization: Bearer &lt;token&gt;</c>
    /// on every outbound gRPC call. Use this to integrate with whatever
    /// service-auth scheme the rest of the deployment uses (e.g. plan-b's
    /// <c>ServiceTokenIssuer.GetToken("altcha")</c>).
    /// </summary>
    public Func<CancellationToken, Task<string>>? TokenProvider { get; set; }

    /// <summary>
    /// Per-call timeout for both <c>CreateChallenge</c> and
    /// <c>VerifyChallenge</c>. Defaults to 5s.
    /// </summary>
    public TimeSpan CallTimeout { get; set; } = TimeSpan.FromSeconds(5);
}