/* SPDX-License-Identifier: GPL-2.0+ */

/*

 * Copyright (C) 2014 Red Hat, Inc.

 */

#ifndef NM_AUTH_MANAGER_H

#define NM_AUTH_MANAGER_H

#include "nm-libnm-core-intern/nm-auth-subject.h"

#include "nm-config-data.h"

/*****************************************************************************/

typedef enum {

    NM_AUTH_CALL_RESULT_UNKNOWN = NM_CLIENT_PERMISSION_RESULT_UNKNOWN,

    NM_AUTH_CALL_RESULT_YES     = NM_CLIENT_PERMISSION_RESULT_YES,

    NM_AUTH_CALL_RESULT_AUTH    = NM_CLIENT_PERMISSION_RESULT_AUTH,

    NM_AUTH_CALL_RESULT_NO      = NM_CLIENT_PERMISSION_RESULT_NO,

} NMAuthCallResult;

static inline NMClientPermissionResult

nm_auth_call_result_to_client(NMAuthCallResult result)

{

    return (NMClientPermissionResult) result;

}

static inline NMAuthCallResult

nm_auth_call_result_eval(gboolean is_authorized, gboolean is_challenge, GError *error)

{

    if (error)

        return NM_AUTH_CALL_RESULT_UNKNOWN;

    if (is_authorized)

        return NM_AUTH_CALL_RESULT_YES;

    if (is_challenge)

        return NM_AUTH_CALL_RESULT_AUTH;

    return NM_AUTH_CALL_RESULT_NO;

}

/*****************************************************************************/

#define NM_TYPE_AUTH_MANAGER (nm_auth_manager_get_type())

#define NM_AUTH_MANAGER(obj) \

    (G_TYPE_CHECK_INSTANCE_CAST((obj), NM_TYPE_AUTH_MANAGER, NMAuthManager))

#define NM_AUTH_MANAGER_CLASS(klass) \

    (G_TYPE_CHECK_CLASS_CAST((klass), NM_TYPE_AUTH_MANAGER, NMAuthManagerClass))

#define NM_IS_AUTH_MANAGER(obj)         (G_TYPE_CHECK_INSTANCE_TYPE((obj), NM_TYPE_AUTH_MANAGER))

#define NM_IS_AUTH_MANAGER_CLASS(klass) (G_TYPE_CHECK_CLASS_TYPE((klass), NM_TYPE_AUTH_MANAGER))

#define NM_AUTH_MANAGER_GET_CLASS(obj) \

    (G_TYPE_INSTANCE_GET_CLASS((obj), NM_TYPE_AUTH_MANAGER, NMAuthManagerClass))

#define NM_AUTH_MANAGER_POLKIT_ENABLED "polkit-enabled"

#define NM_AUTH_MANAGER_SIGNAL_CHANGED "changed"

typedef struct _NMAuthManager      NMAuthManager;

typedef struct _NMAuthManagerClass NMAuthManagerClass;

GType nm_auth_manager_get_type(void);

NMAuthManager *nm_auth_manager_setup(NMAuthPolkitMode auth_polkit_mode);

NMAuthManager *nm_auth_manager_get(void);

void nm_auth_manager_force_shutdown(NMAuthManager *self);

gboolean nm_auth_manager_get_polkit_enabled(NMAuthManager *self);

/*****************************************************************************/

typedef struct _NMAuthManagerCallId NMAuthManagerCallId;

typedef void (*NMAuthManagerCheckAuthorizationCallback)(NMAuthManager *      self,

                                                        NMAuthManagerCallId *call_id,

                                                        gboolean             is_authorized,

                                                        gboolean             is_challenge,

                                                        GError *             error,

                                                        gpointer             user_data);

NMAuthManagerCallId *

nm_auth_manager_check_authorization(NMAuthManager *                         self,

                                    NMAuthSubject *                         subject,

                                    const char *                            action_id,

                                    gboolean                                allow_user_interaction,

                                    NMAuthManagerCheckAuthorizationCallback callback,

                                    gpointer                                user_data);

void nm_auth_manager_check_authorization_cancel(NMAuthManagerCallId *call_id);

#endif /* NM_AUTH_MANAGER_H */