deploy: 168e8b90cb

.dockerignore

@@ -1,9 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-.git
-.github
-build
-docker
-metrics
-scripts

.github/.codecov.yaml

@@ -1,14 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-# CoAP is temporarily ignored since we don't have tests for it yet.
-coverage:
-  ignore:
-    - "tools/*"
-    - "cmd/*"
-    - "coap/*"
-    - "*/mocks/*"
-    - "*/middleware/*"
-    - "pkg/sid/mock.go"
-    - "pkg/tracing/utils.go"
-    - "pkg/prometheus/*"

.github/CODEOWNERS

@@ -1 +0,0 @@
-*   @absmach/supermq

.github/ISSUE_TEMPLATE/bug_report.yaml

@@ -1,52 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Bug Report
-description: File a bug/issue report. Make sure to search to see if an issue already exists for the bug you encountered.
-title: "Bug: <title>"
-labels: ["bug", "needs-review", "help wanted"]
-body:
-  - type: textarea
-    attributes:
-      label: What were you trying to achieve?
-      description: A clear and concise description of what the bug is.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: What are the expected results?
-      description: A concise description of what you expected to happen.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: What are the received results?
-      description: A concise description of what you received.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: Steps To Reproduce
-      description: What are the steps to reproduce the issue?
-      placeholder: |
-        1. In this environment...
-        2. With this config...
-        3. Run '...'
-        4. See error...
-    validations:
-      required: false
-  - type: textarea
-    attributes:
-      label: In what environment did you encounter the issue?
-      description: A concise description of the environment you encountered the issue in.
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: Additional information you deem important
-      description: |
-        Links? References? Anything that will give us more context about the issue you are encountering!
-
-        Tip: You can attach images or log files by clicking this area to highlight it and then dragging files in.
-    validations:
-      required: false

.github/ISSUE_TEMPLATE/config.yaml

@@ -1,11 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-blank_issues_enabled: false
-contact_links:
-  - name: Google group
-    url: https://groups.google.com/forum/#!forum/mainflux
-    about: Join the SuperMQ community on Google group.
-  - name: Gitter
-    url: https://gitter.im/mainflux/mainflux
-    about: Join the SuperMQ community on Gitter.

.github/ISSUE_TEMPLATE/feature_request.yaml

@@ -1,39 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Feature Request
-description: File a feature request. Make sure to search to see if a request already exists for the feature you are requesting.
-title: "Feature: <title>"
-labels: ["enchancement", "needs-review"]
-body:
-  - type: textarea
-    attributes:
-      label: Is your feature request related to a problem? Please describe.
-      description: A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: Describe the feature you are requesting, as well as the possible use case(s) for it.
-      description: A clear and concise description of what you want to happen.
-    validations:
-      required: true
-  - type: dropdown
-    attributes:
-      label: Indicate the importance of this feature to you.
-      description: This will help us prioritize the feature request.
-      options:
-        - Must-have
-        - Should-have
-        - Nice-to-have
-    validations:
-      required: true
-  - type: textarea
-    attributes:
-      label: Anything else?
-      description: |
-        Links? References? Anything that will give us more context about the feature that you are requesting.
-
-        Tip: You can attach images or log files by clicking this area to highlight it and then dragging files in.
-    validations:
-      required: false

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,69 +0,0 @@
-<!-- Copyright (c) Abstract Machines
-SPDX-License-Identifier: Apache-2.0 -->
-
-<!--
-
-Pull request title should be `SMQ-XXX - description` or `NOISSUE - description` where XXX is ID of the issue that this PR relate to.
-Please review the [CONTRIBUTING.md](https://github.com/absmach/supermq/blob/main/CONTRIBUTING.md) file for detailed contributing guidelines.
-
-For Work In Progress Pull Requests, please use the Draft PR feature, see https://github.blog/2019-02-14-introducing-draft-pull-requests/ for further details.
-
-For a timely review/response, please avoid force-pushing additional commits if your PR already received reviews or comments.
-
-- Provide tests for your changes.
-- Use descriptive commit messages.
-- Comment your code where appropriate.
-- Squash your commits
-- Update any related documentation.
--->
-
-# What type of PR is this?
-
-<!--This represents the type of PR you are submitting.
-
-For example:
-This is a bug fix because it fixes the following issue: #1234
-This is a feature because it adds the following functionality: ...
-This is a refactor because it changes the following functionality: ...
-This is a documentation update because it updates the following documentation: ...
-This is a dependency update because it updates the following dependencies: ...
-This is an optimization because it improves the following functionality: ...
--->
-
-## What does this do?
-
-<!--
-Please provide a brief description of what this PR is intended to do.
-Include List any changes that modify/break current functionality.
--->
-
-## Which issue(s) does this PR fix/relate to?
-
-<!--
-For pull requests that relate or close an issue, please include them below.  We like to follow [Github's guidance on linking issues to pull requests](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue).
-
-For example having the text: "Resolves #1234" would connect the current pull request to issue 1234.  And when we merge the pull request, Github will automatically close the issue.
--->
-
-- Related Issue #
-- Resolves #
-
-## Have you included tests for your changes?
-
-<!--If you have not included tests, please explain why.
-For example:
-Yes, I have included tests for my changes.
-No, I have not included tests because I do not know how to.
--->
-
-## Did you document any new/modified feature?
-
-<!--If you have not included documentation, please explain why.
-For example:
-Yes, I have updated the documentation for the new feature.
-No, I have not updated the documentation because I do not know how to.
--->
-
-### Notes
-
-<!--Please provide any additional information you feel is important.-->

.github/dependabot.yaml

@@ -1,33 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-version: 2
-updates:
-  - package-ecosystem: "github-actions"
-    directory: "./.github/workflows"
-    schedule:
-      interval: "monthly"
-      day: "monday"
-      timezone: "Europe/Paris"
-    groups:
-      gh-dependency:
-        patterns:
-          - "*"
-
-  - package-ecosystem: "gomod"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      timezone: "Europe/Paris"
-
-  - package-ecosystem: "docker"
-    directory: "./docker"
-    schedule:
-      interval: "monthly"
-      day: "monday"
-      timezone: "Europe/Paris"
-    groups:
-      docker-dependency:
-        patterns:
-          - "*"

.github/workflows/api-tests.yaml

@@ -1,183 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Property Based Tests
-
-on:
-  pull_request:
-    branches:
-      - main
-    paths:
-      - ".github/workflows/api-tests.yaml"
-      - "api/**"
-      - "auth/api/http/**"
-      - "channels/api/http/**"
-      - "clients/api/http/**"
-      - "domains/api/http/**"
-      - "groups/api/http/**"
-      - "http/api/**"
-      - "journal/api/**"
-      - "users/api/**"
-
-env:
-  TOKENS_URL: http://localhost:9002/users/tokens/issue
-  CREATE_DOMAINS_URL: http://localhost:9003/domains
-  USER_IDENTITY: admin@example.com
-  USER_SECRET: 12345678
-  DOMAIN_NAME: demo-test
-  USERS_URL: http://localhost:9002
-  DOMAIN_URL: http://localhost:9003
-  CLIENTS_URL: http://localhost:9006
-  CHANNELS_URL: http://localhost:9005
-  GROUPS_URL: http://localhost:9004
-  HTTP_ADAPTER_URL: http://localhost:8008
-  AUTH_URL: http://localhost:9001
-  JOURNAL_URL: http://localhost:9021
-
-jobs:
-  api-test:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v5
-
-      - name: Install Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: 1.25.x
-          cache-dependency-path: "go.sum"
-
-      - name: Build images
-        run: make all -j $(nproc) && make dockers_dev -j $(nproc)
-
-      - name: Start containers
-        run: make run up args="-d" && make run_addons up args="-d"
-
-      - name: Set access token
-        run: |
-          export USER_TOKEN=$(curl -sSX POST $TOKENS_URL -H "Content-Type: application/json" -d "{\"identity\": \"$USER_IDENTITY\",\"secret\": \"$USER_SECRET\"}" | jq -r .access_token)
-          export DOMAIN_ID=$(curl -sSX POST $CREATE_DOMAINS_URL -H "Content-Type: application/json" -H "Authorization: Bearer $USER_TOKEN" -d "{\"name\":\"$DOMAIN_NAME\",\"route\":\"$DOMAIN_NAME\"}" | jq -r .id)
-          echo "USER_TOKEN=$USER_TOKEN" >> $GITHUB_ENV
-          export CLIENT_SECRET=$(supermq-cli provision test | /usr/bin/grep -Eo '"secret": "[^"]+"' | awk 'NR % 2 == 0' | sed 's/"secret": "\(.*\)"/\1/')
-          echo "CLIENT_SECRET=$CLIENT_SECRET" >> $GITHUB_ENV
-
-      - name: Check for changes in specific paths
-        uses: dorny/paths-filter@v3
-        id: changes
-        with:
-          filters: |
-            journal:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/journal.yaml"
-              - "journal/api/**"
-
-            auth:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/auth.yaml"
-              - "auth/api/http/**"
-
-            domains:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/domains.yaml"
-              - "domains/api/http/**"
-
-            http:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/http.yaml"
-              - "http/api/**"
-
-            clients:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/clients.yaml"
-              - "clients/api/http/**"
-
-            channels:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/channels.yaml"
-              - "channels/api/http/**"
-
-            groups:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/groups.yaml"
-              - "groups/api/http/**"
-
-            users:
-              - ".github/workflows/api-tests.yaml"
-              - "apidocs/openapi/users.yaml"
-              - "users/api/**"
-
-      - name: Run Users API tests
-        if: steps.changes.outputs.users == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/users.yaml
-          base-url: ${{ env.USERS_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --exclude-operation-id=requestPasswordReset --phases=examples,stateful'
-
-      - name: Run Groups API tests
-        if: steps.changes.outputs.groups == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/groups.yaml
-          base-url: ${{ env.GROUPS_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Run Clients API tests
-        if: steps.changes.outputs.clients == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/clients.yaml
-          base-url: ${{ env.CLIENTS_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Run Channels API tests
-        if: steps.changes.outputs.channels == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/channels.yaml
-          base-url: ${{ env.CHANNELS_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Run HTTP Adapter API tests
-        if: steps.changes.outputs.http == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/http.yaml
-          base-url: ${{ env.HTTP_ADAPTER_URL }}
-          checks: all
-          args: '--header "Authorization: Client ${{ env.CLIENT_SECRET }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Run Auth API tests
-        if: steps.changes.outputs.auth == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/auth.yaml
-          base-url: ${{ env.AUTH_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Run Domains API tests
-        if: steps.changes.outputs.domains == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/domains.yaml
-          base-url: ${{ env.DOMAIN_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Run Journal API tests
-        if: steps.changes.outputs.journal == 'true'
-        uses: schemathesis/action@v2.1.0
-        with:
-          schema: apidocs/openapi/journal.yaml
-          base-url: ${{ env.JOURNAL_URL }}
-          checks: all
-          args: '--header "Authorization: Bearer ${{ env.USER_TOKEN }}" --suppress-health-check=filter_too_much --exclude-checks=positive_data_acceptance --phases=examples'
-
-      - name: Stop containers
-        if: always()
-        run: make run down args="-v" && make run_addons down args="-v"

.github/workflows/build.yaml

@@ -1,77 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Continuous Delivery
-
-on:
-  push:
-    branches:
-      - main
-
-jobs:
-  build-and-push:
-    name: Build and Push
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v5
-
-      - name: Fetch tags for the build
-        run: |
-          git fetch --prune --unshallow --tags
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: 1.25.x
-          cache-dependency-path: "go.sum"
-
-      - name: Set GOBIN
-        run: echo "GOBIN=$HOME/.local/bin" >> $GITHUB_ENV
-
-      - name: Add GOBIN to PATH
-        run: echo "$HOME/.local/bin" >> $GITHUB_PATH
-
-      - name: Run tests
-        run: |
-          make test
-
-      - name: Upload coverage
-        uses: codecov/codecov-action@v5
-        with:
-          token: ${{ secrets.CODECOV }}
-          files: ./coverage/*.out
-          verbose: true
-
-      - name: Set up Docker Build
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to DockerHub
-        uses: docker/login-action@v3
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKER_USERNAME }}
-          password: ${{ secrets.DOCKER_TOKEN }}
-
-      - name: Compile check for rabbitmq
-        run: |
-          SMQ_MESSAGE_BROKER_TYPE=msg_rabbitmq make mqtt
-
-      - name: Compile check for redis
-        run: |
-          SMQ_ES_TYPE=es_redis make mqtt
-
-      - name: Build and push Docker images
-        run: |
-          make latest -j $(nproc)
-
-      - name: Trigger Helm Chart Deployment
-        if: success() && github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: peter-evans/repository-dispatch@v4
-        with:
-          token: ${{ secrets.REPO_DISPATCH_TOKEN }}
-          repository: absmach/amdm
-          event-type: deploy-latest-smq-images

.github/workflows/check-generated-files.yaml

@@ -1,141 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Check the consistency of generated files
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-
-jobs:
-  check-generated-files:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v5
-
-      - name: Install Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: 1.25.x
-          cache-dependency-path: "go.sum"
-
-      - name: Set GOBIN
-        run: echo "GOBIN=$HOME/.local/bin" >> $GITHUB_ENV
-
-      - name: Add GOBIN to PATH
-        run: echo "$HOME/.local/bin" >> $GITHUB_PATH
-
-      - name: Check for changes in go.mod
-        run: |
-          go mod tidy
-          git diff --exit-code
-
-      - name: Check for changes in specific paths
-        uses: dorny/paths-filter@v3
-        id: changes
-        with:
-          base: main
-          filters: |
-            proto:
-              - ".github/workflows/check-generated-files.yaml"
-              - "auth.proto"
-              - "auth/*.pb.go"
-              - "pkg/messaging/message.proto"
-              - "pkg/messaging/*.pb.go"
-
-            mocks:
-              - ".github/workflows/check-generated-files.yaml"
-              - "pkg/sdk/sdk.go"
-              - "users/postgres/clients.go"
-              - "users/clients.go"
-              - "pkg/clients/clients.go"
-              - "pkg/messaging/pubsub.go"
-              - "clients/postgres/clients.go"
-              - "clients/clients.go"
-              - "pkg/authz.go"
-              - "pkg/authn.go"
-              - "auth/domains.go"
-              - "auth/keys.go"
-              - "auth/service.go"
-              - "pkg/events/events.go"
-              - "pkg/groups/groups.go"
-              - "users/emailer.go"
-              - "users/hasher.go"
-              - "journal/journal.go"
-              - "consumers/notifier.go"
-
-      - name: Set up protoc
-        if: steps.changes.outputs.proto == 'true'
-        run: |
-          PROTOC_VERSION=33.0
-          PROTOC_GEN_VERSION=v1.36.10
-          PROTOC_GRPC_VERSION=v1.5.1
-
-          # Export the variables so they are available in future steps
-          echo "PROTOC_VERSION=$PROTOC_VERSION" >> $GITHUB_ENV
-          echo "PROTOC_GEN_VERSION=$PROTOC_GEN_VERSION" >> $GITHUB_ENV
-          echo "PROTOC_GRPC_VERSION=$PROTOC_GRPC_VERSION" >> $GITHUB_ENV
-
-          # Download and install protoc
-          PROTOC_ZIP=protoc-$PROTOC_VERSION-linux-x86_64.zip
-          curl -0L -o $PROTOC_ZIP https://github.com/protocolbuffers/protobuf/releases/download/v$PROTOC_VERSION/$PROTOC_ZIP
-          unzip -o $PROTOC_ZIP -d protoc3
-          sudo mv protoc3/bin/* /usr/local/bin/
-          sudo mv protoc3/include/* /usr/local/include/
-          rm -rf $PROTOC_ZIP protoc3
-
-          # Install protoc-gen-go and protoc-gen-go-grpc
-          go install google.golang.org/protobuf/cmd/protoc-gen-go@$PROTOC_GEN_VERSION
-          go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@$PROTOC_GRPC_VERSION
-
-          # Add protoc to the PATH
-          export PATH=$PATH:/usr/local/bin/protoc
-
-      - name: Check Protobuf is up to Date
-        if: steps.changes.outputs.proto == 'true'
-        run: |
-          for p in $(find . -name "*.pb.go"); do
-            mv $p $p.tmp
-          done
-
-          make proto
-
-          for p in $(find . -name "*.pb.go"); do
-            if ! cmp -s $p $p.tmp; then
-              echo "Error: Proto file and generated Go file $p are out of sync!"
-              echo "Here is the difference:"
-              diff $p $p.tmp || true
-              echo "Please run 'make proto' with protoc version $PROTOC_VERSION, protoc-gen-go version $PROTOC_GEN_VERSION and protoc-gen-go-grpc version $PROTOC_GRPC_VERSION and commit the changes."
-              exit 1
-            fi
-          done
-
-      - name: Check Mocks are up to Date
-        if: steps.changes.outputs.mocks == 'true'
-        run: |
-          for f in $(find . -type f -path '*/mocks/*.go' ! -name 'doc.go'); do
-              mv $f $f.tmp
-          done
-
-          make mocks
-
-          check_mock_changes() {
-            local file_path=$1
-            local tmp_file_path=$1.tmp
-            local entity_name=$2
-
-            if ! cmp -s "$file_path" "$tmp_file_path"; then
-                echo "Error: Generated mocks for $entity_name are out of sync!"
-                echo "Please run 'make mocks' with mockery version $MOCKERY_VERSION and commit the changes."
-                exit 1
-            fi
-          }
-
-          for f in $(find . -type f -path '*/mocks/*.go' ! -name 'doc.go'); do
-              check_mock_changes $f "$f"
-          done

.github/workflows/check-license.yaml

@@ -1,40 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Check License Header
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - main
-
-jobs:
-  check-license:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v5
-
-      - name: Check License Header
-        run: |
-          CHECK=""
-          for file in $(grep -rl --exclude-dir={.git,build} \
-            --exclude=\*.{crt,key,pem,zed,hcl,md,json,csv,mod,sum,tmpl,args} \
-            --exclude={CODEOWNERS,LICENSE,MAINTAINERS,enabled_plugins,rabbitmq.conf} \
-            .); do
-              
-              if ! head -n 5 "$file" | grep -q "Copyright (c) Abstract Machines"; then
-                CHECK="$CHECK $file"
-              fi
-          done
-
-          if [ "$CHECK" ]; then
-            echo "License header check failed. Fix the following files:"
-            echo "$CHECK"
-            exit 1
-          else
-            echo "All files have the correct license header!"
-          fi

.github/workflows/swagger-ui.yaml

@@ -1,31 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: Deploy GitHub Pages
-
-on:
-  push:
-    branches:
-      - main
-
-jobs:
-  swagger-ui:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v5
-
-      - name: Swagger UI action
-        id: swagger-ui-action
-        uses: blokovi/swagger-ui-action@main
-        with:
-          dir: "./apidocs/openapi"
-          pattern: "*.yaml"
-          debug: "true"
-
-      - name: Deploy to GitHub Pages
-        uses: peaceiris/actions-gh-pages@v4
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          publish_dir: swagger-ui
-          cname: docs.api.supermq.absmach.eu

.github/workflows/tests.yaml

@@ -1,365 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-name: CI Pipeline
-
-on:
-  pull_request:
-    branches:
-      - main
-
-jobs:
-  lint-and-build: # Linting and building are combined to save time for setting up Go
-    name: Lint and Build
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Checkout Code
-        uses: actions/checkout@v5
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: 1.25.x
-          cache-dependency-path: "go.sum"
-
-      - name: Fetch Certs
-        run: |
-          make fetch_certs
-          if [[ -n $(git status --porcelain docker/addons/certs) ]]; then
-            echo "Certs docker file is not up to date. Please update it"
-            git diff docker/addons/certs
-            exit 1
-          else
-            exit 0
-          fi
-
-      - name: Install protolint
-        run: |
-          go install github.com/yoheimuta/protolint/cmd/protolint@latest
-
-      - name: Lint Protobuf Files
-        run: |
-          protolint .
-
-      - name: Run linters
-        uses: golangci/golangci-lint-action@v8
-        with:
-          version: v2.4.0
-          args: --config ./tools/config/.golangci.yaml
-
-      - name: Build all Binaries
-        run: |
-          make all -j $(nproc)
-
-      - name: Compile check for rabbitmq
-        run: |
-          SMQ_MESSAGE_BROKER_TYPE=msg_rabbitmq make mqtt
-
-      - name: Compile check for redis
-        run: |
-          SMQ_ES_TYPE=es_redis make mqtt
-
-  run-tests:
-    name: Run tests
-    runs-on: ubuntu-latest
-    needs: lint-and-build
-
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v5
-        with:
-          fetch-depth: 0
-
-      - name: Setup Go
-        uses: actions/setup-go@v6
-        with:
-          go-version: 1.25.x
-          cache-dependency-path: "go.sum"
-
-      - name: Check for changes in specific paths
-        uses: dorny/paths-filter@v3
-        id: changes
-        with:
-          base: main
-          filters: |
-            workflow:
-              - ".github/workflows/tests.yaml"
-
-            auth:
-              - "auth/**"
-              - "cmd/auth/**"
-              - "auth.proto"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "pkg/ulid/**"
-              - "pkg/uuid/**"
-
-            channels:
-              - "channels/**"
-              - "cmd/channels/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "auth/**"
-              - "pkg/sdk/**"
-              - "clients/api/grpc/**"
-              - "groups/api/grpc/**"
-              - "domains/api/grpc/**"
-              - "internal/grpc/**"
-
-            cli:
-              - "cli/**"
-              - "cmd/cli/**"
-              - "pkg/sdk/**"
-
-            clients:
-              - "clients/**"
-              - "cmd/clients/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "auth/**"
-              - "pkg/ulid/**"
-              - "pkg/uuid/**"
-              - "pkg/events/**"
-              - "groups/api/grpc/**"
-              - "channels/api/grpc/**"
-              - "domains/api/grpc/**"
-              - "internal/grpc/**"
-
-            coap:
-              - "coap/**"
-              - "cmd/coap/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "clients/**"
-              - "pkg/messaging/**"
-
-            domains:
-              - "domains/**"
-              - "cmd/domains/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "auth/**"
-              - "internal/grpc/**"
-
-            groups:
-              - "groups/**"
-              - "cmd/groups/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "auth/**"
-              - "pkg/ulid/**"
-              - "pkg/uuid/**"
-              - "clients/api/grpc/**"
-              - "channels/api/grpc/**"
-              - "domains/api/grpc/**"
-              - "internal/grpc/**"
-
-            http:
-              - "http/**"
-              - "cmd/http/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "clients/**"
-              - "pkg/messaging/**"
-              - "logger/**"
-
-            internal:
-              - "internal/**"
-
-            journal:
-              - "journal/**"
-              - "cmd/journal/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "auth/**"
-              - "pkg/events/**"
-
-            logger:
-              - "logger/**"
-
-            mqtt:
-              - "mqtt/**"
-              - "cmd/mqtt/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "clients/**"
-              - "pkg/messaging/**"
-              - "logger/**"
-              - "pkg/events/**"
-
-            pkg-errors:
-              - "pkg/errors/**"
-
-            pkg-events:
-              - "pkg/events/**"
-              - "pkg/messaging/**"
-
-            pkg-grpcclient:
-              - "pkg/grpcclient/**"
-
-            pkg-messaging:
-              - "pkg/messaging/**"
-
-            pkg-sdk:
-              - "pkg/sdk/**"
-              - "pkg/errors/**"
-              - "pkg/groups/**"
-              - "auth/**"
-              - "http/**"
-              - "internal/*"
-              - "clients/**"
-              - "users/**"
-              - "channels/**"
-              - "domains/**"
-              - "groups/**"
-              - "journal/**"
-              - "api/http/**"
-
-            pkg-transformers:
-              - "pkg/transformers/**"
-
-            pkg-ulid:
-              - "pkg/ulid/**"
-
-            pkg-uuid:
-              - "pkg/uuid/**"
-
-            users:
-              - "users/**"
-              - "cmd/users/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "auth/**"
-              - "pkg/ulid/**"
-              - "pkg/uuid/**"
-              - "pkg/events/**"
-
-            ws:
-              - "ws/**"
-              - "cmd/ws/**"
-              - "auth.pb.go"
-              - "auth_grpc.pb.go"
-              - "clients/**"
-              - "pkg/messaging/**"
-
-      - name: Create coverage directory
-        run: |
-          mkdir coverage
-
-      - name: Run journal tests
-        if: steps.changes.outputs.journal == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/journal.out ./journal/...
-
-      - name: Run auth tests
-        if: steps.changes.outputs.auth == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/auth.out ./auth/...
-
-      - name: Run domains tests
-        if: steps.changes.outputs.domains == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/domains.out ./domains/...
-
-      - name: Run cli tests
-        if: steps.changes.outputs.cli == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/cli.out ./cli/...
-
-      - name: Run CoAP tests
-        if: steps.changes.outputs.coap == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/coap.out ./coap/...
-
-      - name: Run HTTP tests
-        if: steps.changes.outputs.http == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/http.out ./http/...
-
-      - name: Run internal tests
-        if: steps.changes.outputs.internal == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/internal.out ./internal/...
-
-      - name: Run logger tests
-        if: steps.changes.outputs.logger == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/logger.out ./logger/...
-
-      - name: Run MQTT tests
-        if: steps.changes.outputs.mqtt == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/mqtt.out ./mqtt/...
-
-      - name: Run pkg errors tests
-        if: steps.changes.outputs.pkg-errors == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-errors.out ./pkg/errors/...
-
-      - name: Run pkg events tests
-        if: steps.changes.outputs.pkg-events == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-events.out ./pkg/events/...
-
-      - name: Run pkg grpcclient tests
-        if: steps.changes.outputs.pkg-grpcclient == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-grpcclient.out ./pkg/grpcclient/...
-
-      - name: Run pkg messaging tests
-        if: steps.changes.outputs.pkg-messaging == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-messaging.out ./pkg/messaging/...
-
-      - name: Run pkg sdk tests
-        if: steps.changes.outputs.pkg-sdk == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-sdk.out ./pkg/sdk/...
-
-      - name: Run pkg transformers tests
-        if: steps.changes.outputs.pkg-transformers == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-transformers.out ./pkg/transformers/...
-
-      - name: Run pkg ulid tests
-        if: steps.changes.outputs.pkg-ulid == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-ulid.out ./pkg/ulid/...
-
-      - name: Run pkg uuid tests
-        if: steps.changes.outputs.pkg-uuid == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/pkg-uuid.out ./pkg/uuid/...
-
-      - name: Run clients tests
-        if: steps.changes.outputs.clients == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/clients.out ./clients/...
-
-      - name: Run channels tests
-        if: steps.changes.outputs.channels == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/channels.out ./channels/...
-
-      - name: Run users tests
-        if: steps.changes.outputs.users == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/users.out ./users/...
-
-      - name: Run groups tests
-        if: steps.changes.outputs.groups == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/groups.out ./groups/...
-
-      - name: Run WebSocket tests
-        if: steps.changes.outputs.ws == 'true' || steps.changes.outputs.workflow == 'true'
-        run: |
-          go test --race -v -count=1 -coverprofile=coverage/ws.out ./ws/...
-
-      - name: Upload coverage
-        uses: codecov/codecov-action@v5
-        with:
-          token: ${{ secrets.CODECOV }}
-          files: ./coverage/*.out
-          verbose: true

.gitignore

@@ -1,20 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-# build dirs
-build
-
-# tools
-tools/e2e/e2e
-tools/mqtt-bench/mqtt-bench
-tools/provision/provision
-tools/provision/mgconn.toml
-
-# coverage files
-coverage
-
-# Schemathesis
-.hypothesis
-
-# Ignore Openbao data directory as it contains runtime-generated data
-docker/addons/certs/openbao/

ADOPTERS.md

@@ -1,36 +0,0 @@
-# Adopters
-
-As SuperMQ Community grows, we'd like to keep track of SuperMQ adopters to grow the community, contact other users, share experiences and best practices.
-
-To accomplish this, we created a public ledger. The list of organizations and users who consider themselves as SuperMQ adopters and that **publicly/officially** shared information and/or details of their adoption journey(optional).
-Where users themselves directly maintain the list.
-
-## Adding yourself as an adopter
-If you are using SuperMQ, please consider adding yourself as an adopter with a brief description of your use case by opening a pull request to this file and adding a section describing your adoption of SuperMQ technology.
-
-**Please send PRs to add or remove organizations/users**
-
-### Format
-
-```
-N: Name of user (company or individual)
-D: Short Use Case Description (optional)
-L: Link with further information (optional)
-T: Type of adaptation: Evaluation, Core Technology, Production Usage (optional)
-```
-
-## Requirements
-* You must represent the user or organization listed. Do NOT add entries on behalf of other organizations or individuals.
-Pull request commit must be [signed](https://docs.github.com/en/github/authenticating-to-github/signing-commits) and auto-checked with [ Developer Certificate of Origin (DCO)](https://probot.github.io/apps/dco/)
-* There is no minimum requirement or adaptation size, but we request to list permanent deployments only, i.e., no demo or trial deployments. Commercial or production use is not required. A well-done home lab setup can be equally impressive as a large-scale commercial deployment.
-
-
-**The list of organizations/users that have publicly shared the usage of SuperMQ:**
-
-**Note**: Several other organizations/users couldn't publicly share their usage details but are active project contributors and SuperMQ Community members.
-
-
-## Adopters list (alphabetical)
-
-
-**Note:** The list is maintained by the users themselves. If you find yourself on this list, and you think it's inappropriate. Please contact [project maintainers](https://github.com/absmach/supermq/blob/main/MAINTAINERS) and you will be permanently removed from the list.

CNAME

@@ -0,0 +1 @@
+docs.api.magistrala.absmach.eu

CONTRIBUTING.md

@@ -1,87 +0,0 @@
-# Contributing to SuperMQ
-
-The following is a set of guidelines to contribute to SuperMQ and its libraries, which are
-hosted on the [Abstract Machines Organization](https://github.com/absmach) on GitHub.
-
-This project adheres to the [Contributor Covenant 1.2](http://contributor-covenant.org/version/1/2/0).
-By participating, you are expected to uphold this code. Please report unacceptable behavior to
-[abuse@abstractmachines.fr](mailto:abuse@abstractmachines.fr).
-
-## Reporting issues
-
-Reporting issues are a great way to contribute to the project. We are perpetually grateful about a well-written,
-thorough bug report.
-
-Before raising a new issue, check [our issue
-list](https://github.com/absmach/supermq/issues) to determine if it already contains the
-problem that you are facing.
-
-A good bug report shouldn't leave others needing to chase you for more information. Please be as detailed as possible. The following questions might serve as a template for writing a detailed
-report:
-
-- What were you trying to achieve?
-- What are the expected results?
-- What are the received results?
-- What are the steps to reproduce the issue?
-- In what environment did you encounter the issue?
-
-## Pull requests
-
-Good pull requests (e.g. patches, improvements, new features) are a fantastic help. They should
-remain focused in scope and avoid unrelated commits.
-
-**Please ask first** before embarking on any significant pull request (e.g. implementing new features,
-refactoring code etc.), otherwise you risk spending a lot of time working on something that the
-maintainers might not want to merge into the project.
-
-Please adhere to the coding conventions used throughout the project. If in doubt, consult the
-[Effective Go](https://golang.org/doc/effective_go.html) style guide.
-
-To contribute to the project, [fork](https://help.github.com/articles/fork-a-repo/) it,
-clone your fork repository, and configure the remotes:
-
-```
-git clone https://github.com/<your-username>/supermq.git
-cd supermq
-git remote add upstream https://github.com/absmach/supermq.git
-```
-
-If your cloned repository is behind the upstream commits, then get the latest changes from upstream:
-
-```
-git checkout main
-git pull --rebase upstream main
-```
-
-Create a new topic branch from `main` using the naming convention `SMQ-[issue-number]`
-to help us keep track of your contribution scope:
-
-```
-git checkout -b SMQ-[issue-number]
-```
-
-Commit your changes in logical chunks. When you are ready to commit, make sure
-to write a Good Commit Message™. Consult the [Erlang's contributing guide](https://github.com/erlang/otp/wiki/Writing-good-commit-messages)
-if you're unsure of what constitutes a Good Commit Message™. Use [interactive rebase](https://help.github.com/articles/about-git-rebase)
-to group your commits into logical units of work before making it public.
-
-Note that every commit you make must be signed. By signing off your work you indicate that you
-are accepting the [Developer Certificate of Origin](https://developercertificate.org/).
-
-Use your real name (sorry, no pseudonyms or anonymous contributions). If you set your `user.name`
-and `user.email` git configs, you can sign your commit automatically with `git commit -s`.
-
-Locally merge (or rebase) the upstream development branch into your topic branch:
-
-```
-git pull --rebase upstream main
-```
-
-Push your topic branch up to your fork:
-
-```
-git push origin SMQ-[issue-number]
-```
-
-[Open a Pull Request](https://help.github.com/articles/using-pull-requests/) with a clear title
-and detailed description.

LICENSE

@@ -1,191 +0,0 @@
-
-                                 Apache License
-                           Version 2.0, January 2004
-                        https://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   Copyright 2015-2020 SuperMQ
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       https://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.

MAINTAINERS

@@ -1,30 +0,0 @@
-# SuperMQ follows the timeless, highly efficient and totally unfair system
-# known as [Benevolent dictator for
-# life](https://en.wikipedia.org/wiki/Benevolent_Dictator_for_Life), with
-# Drasko DRASKOVIC in the role of BDFL.
-
-[bdfl]
-	
-	[[drasko]]
-	Name	= "Drasko Draskovic"
-	Email	= "drasko@abstractmachines.fr"
-	GitHub	= "drasko"
-
-# However, this role serves only in dead-lock events, or in a special and very rare cases
-# when BDFL completely disagrees with the decisions made.
-# In the normal flow of events, decisions on the project design are made through discussions,
-# most often on the Pull Requests.
-#
-# Maintainers have the special role in the project in managing and accepting PRs,
-# overall leading the project and making design decisions on the maintained subsystems.
-#
-# A reference list of all maintainers of the SuperMQ project.
-
-# ADD YOURSELF HERE IN ALPHABETICAL ORDER
-
-[maintainers]
- 
- 	[[dusan]]
-	Name	= "Dusan Borovcanin"
-	Email	= "dusan.borovcanin@abstractmachines.fr"
-	GitHub	= "dborovcanin"

Makefile

@@ -1,276 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-SMQ_DOCKER_IMAGE_NAME_PREFIX ?= supermq
-BUILD_DIR ?= build
-SERVICES = auth users clients groups channels domains http coap ws cli mqtt journal
-TEST_API_SERVICES = journal auth certs http clients users channels groups domains
-TEST_API = $(addprefix test_api_,$(TEST_API_SERVICES))
-DOCKERS = $(addprefix docker_,$(SERVICES))
-DOCKERS_DEV = $(addprefix docker_dev_,$(SERVICES))
-CGO_ENABLED ?= 0
-GOARCH ?= amd64
-VERSION ?= $(shell git describe --abbrev=0 --tags 2>/dev/null || echo 'unknown')
-COMMIT ?= $(shell git rev-parse HEAD)
-TIME ?= $(shell date +%F_%T)
-USER_REPO ?= $(shell git remote get-url origin | sed -E 's@.*/([^/]+)/([^/.]+)(\.git)?@\1_\2@')
-empty:=
-space:= $(empty) $(empty)
-# Docker compose project name should follow this guidelines: https://docs.docker.com/compose/reference/#use--p-to-specify-a-project-name
-DOCKER_PROJECT ?= $(shell echo $(subst $(space),,$(USER_REPO)) | sed -E 's/[^a-zA-Z0-9]/_/g' | tr '[:upper:]' '[:lower:]')
-DOCKER_COMPOSE_COMMANDS_SUPPORTED := up down config restart
-DEFAULT_DOCKER_COMPOSE_COMMAND  := up
-GRPC_MTLS_CERT_FILES_EXISTS = 0
-MOCKERY = $(GOBIN)/mockery
-MOCKERY_VERSION=3.5.5
-PKG_PROTO_GEN_OUT_DIR=api/grpc
-INTERNAL_PROTO_DIR=internal/proto
-INTERNAL_PROTO_FILES := $(shell find $(INTERNAL_PROTO_DIR) -name "*.proto" | sed 's|$(INTERNAL_PROTO_DIR)/||')
-
-ifneq ($(SMQ_MESSAGE_BROKER_TYPE),)
-	SMQ_MESSAGE_BROKER_TYPE := $(SMQ_MESSAGE_BROKER_TYPE)
-else
-	SMQ_MESSAGE_BROKER_TYPE=msg_nats
-endif
-
-ifneq ($(SMQ_ES_TYPE),)
-	SMQ_ES_TYPE := $(SMQ_ES_TYPE)
-else
-	SMQ_ES_TYPE=es_nats
-endif
-
-define compile_service
-	CGO_ENABLED=$(CGO_ENABLED) GOOS=$(GOOS) GOARCH=$(GOARCH) GOARM=$(GOARM) \
-	go build -tags $(SMQ_MESSAGE_BROKER_TYPE) -tags $(SMQ_ES_TYPE) -ldflags "-s -w \
-	-X 'github.com/absmach/supermq.BuildTime=$(TIME)' \
-	-X 'github.com/absmach/supermq.Version=$(VERSION)' \
-	-X 'github.com/absmach/supermq.Commit=$(COMMIT)'" \
-	-o ${BUILD_DIR}/$(1) cmd/$(1)/main.go
-endef
-
-define make_docker
-	$(eval svc=$(subst docker_,,$(1)))
-
-	docker build \
-		--no-cache \
-		--build-arg SVC=$(svc) \
-		--build-arg GOARCH=$(GOARCH) \
-		--build-arg GOARM=$(GOARM) \
-		--build-arg VERSION=$(VERSION) \
-		--build-arg COMMIT=$(COMMIT) \
-		--build-arg TIME=$(TIME) \
-		--tag=$(SMQ_DOCKER_IMAGE_NAME_PREFIX)/$(svc) \
-		-f docker/Dockerfile .
-endef
-
-define make_docker_dev
-	$(eval svc=$(subst docker_dev_,,$(1)))
-
-	docker build \
-		--no-cache \
-		--build-arg SVC=$(svc) \
-		--tag=$(SMQ_DOCKER_IMAGE_NAME_PREFIX)/$(svc) \
-		-f docker/Dockerfile.dev ./build
-endef
-
-ADDON_SERVICES = journal certs
-
-EXTERNAL_SERVICES = prometheus
-
-ifneq ($(filter run%,$(firstword $(MAKECMDGOALS))),)
-  temp_args := $(wordlist 2,$(words $(MAKECMDGOALS)),$(MAKECMDGOALS))
-  DOCKER_COMPOSE_COMMAND := $(if $(filter $(DOCKER_COMPOSE_COMMANDS_SUPPORTED),$(temp_args)), $(filter $(DOCKER_COMPOSE_COMMANDS_SUPPORTED),$(temp_args)), $(DEFAULT_DOCKER_COMPOSE_COMMAND))
-  $(eval $(DOCKER_COMPOSE_COMMAND):;@)
-endif
-
-ifneq ($(filter run_addons%,$(firstword $(MAKECMDGOALS))),)
-  temp_args := $(wordlist 2,$(words $(MAKECMDGOALS)),$(MAKECMDGOALS))
-  RUN_ADDON_ARGS :=  $(if $(filter-out $(DOCKER_COMPOSE_COMMANDS_SUPPORTED),$(temp_args)), $(filter-out $(DOCKER_COMPOSE_COMMANDS_SUPPORTED),$(temp_args)),$(ADDON_SERVICES) $(EXTERNAL_SERVICES))
-  $(eval $(RUN_ADDON_ARGS):;@)
-endif
-
-ifneq ("$(wildcard docker/ssl/certs/*-grpc-*)","")
-GRPC_MTLS_CERT_FILES_EXISTS = 1
-else
-GRPC_MTLS_CERT_FILES_EXISTS = 0
-endif
-
-FILTERED_SERVICES = $(filter-out $(RUN_ADDON_ARGS), $(SERVICES))
-
-all: $(SERVICES)
-
-.PHONY: all $(SERVICES) dockers dockers_dev latest release run run_addons grpc_mtls_certs check_mtls check_certs test_api mocks
-
-clean:
-	rm -rf ${BUILD_DIR}
-
-cleandocker:
-	# Stops containers and removes containers, networks, volumes, and images created by up
-	docker compose -f docker/docker-compose.yaml -p $(DOCKER_PROJECT) down --rmi all -v --remove-orphans
-
-ifdef pv
-	# Remove unused volumes
-	docker volume ls -f name=$(SMQ_DOCKER_IMAGE_NAME_PREFIX) -f dangling=true -q | xargs -r docker volume rm
-endif
-
-install:
-	for file in $(BUILD_DIR)/*; do \
-		cp $$file $(GOBIN)/supermq-`basename $$file`; \
-	done
-
-mocks: $(MOCKERY)
-	@$(MOCKERY) --config ./tools/config/.mockery.yaml
-
-$(MOCKERY):
-	@mkdir -p $(GOBIN)
-	@mkdir -p mockery
-	@echo ">> downloading mockery $(MOCKERY_VERSION)..."
-	@curl -sL https://github.com/vektra/mockery/releases/download/v$(MOCKERY_VERSION)/mockery_$(MOCKERY_VERSION)_Linux_x86_64.tar.gz | tar -xz -C mockery
-	@mv mockery/mockery $(GOBIN)
-	@rm -r mockery
-
-DIRS = consumers readers postgres internal
-test: mocks
-	mkdir -p coverage
-	@for dir in $(DIRS); do \
-		go test -v --race -failfast -count 1 -tags test -coverprofile=coverage/$$dir.out $$(go list ./... | grep $$dir | grep -v 'cmd'); \
-	done
-	go test -v --race -failfast -count 1 -tags test -coverprofile=coverage/coverage.out $$(go list ./... | grep -v 'consumers\|readers\|postgres\|internal\|cmd\|middleware')
-
-define test_api_service
-	$(eval svc=$(subst test_api_,,$(1)))
-	@which uv > /dev/null || (echo "uv not found, please install it from https://github.com/astral-sh/uv" && exit 1)
-
-	@if [ -z "$(USER_TOKEN)" ]; then \
-		echo "USER_TOKEN is not set"; \
-		echo "Please set it to a valid token"; \
-		exit 1; \
-	fi
-
-	@if [ "$(svc)" = "http" ] && [ -z "$(CLIENT_SECRET)" ]; then \
-		echo "CLIENT_SECRET is not set"; \
-		echo "Please set it to a valid secret"; \
-		exit 1; \
-	fi
-
-	@if [ "$(svc)" = "http" ]; then \
-		uvx schemathesis run apidocs/openapi/$(svc).yaml \
-		--checks all \
-		--url $(2) \
-		--header "Authorization: Client $(CLIENT_SECRET)" \
-		--suppress-health-check=filter_too_much \
-		--exclude-checks=positive_data_acceptance \
-		--phases=examples,stateful; \
-	else \
-		uvx schemathesis run apidocs/openapi/$(svc).yaml \
-		--checks all \
-		--url $(2) \
-		--header "Authorization: Bearer $(USER_TOKEN)" \
-		--suppress-health-check=filter_too_much \
-		--exclude-checks=positive_data_acceptance \
-		--exclude-operation-id=requestPasswordReset \
-		--phases=examples,stateful; \
-	fi
-endef
-
-test_api_users: TEST_API_URL := http://localhost:9002
-test_api_clients: TEST_API_URL := http://localhost:9006
-test_api_domains: TEST_API_URL := http://localhost:9003
-test_api_channels: TEST_API_URL := http://localhost:9005
-test_api_groups: TEST_API_URL := http://localhost:9004
-test_api_http: TEST_API_URL := http://localhost:8008
-test_api_auth: TEST_API_URL := http://localhost:9001
-test_api_certs: TEST_API_URL := http://localhost:9019
-test_api_journal: TEST_API_URL := http://localhost:9021
-
-$(TEST_API):
-	$(call test_api_service,$(@),$(TEST_API_URL))
-
-proto:
-	protoc -I. --go_out=. --go_opt=paths=source_relative pkg/messaging/*.proto
-	mkdir -p $(PKG_PROTO_GEN_OUT_DIR)
-	protoc -I $(INTERNAL_PROTO_DIR) --go_out=$(PKG_PROTO_GEN_OUT_DIR) --go_opt=paths=source_relative --go-grpc_out=$(PKG_PROTO_GEN_OUT_DIR) --go-grpc_opt=paths=source_relative $(INTERNAL_PROTO_FILES)
-
-$(FILTERED_SERVICES):
-	$(call compile_service,$(@))
-
-$(DOCKERS):
-	$(call make_docker,$(@),$(GOARCH))
-
-$(DOCKERS_DEV):
-	$(call make_docker_dev,$(@))
-
-dockers: $(DOCKERS)
-dockers_dev: $(DOCKERS_DEV)
-
-define docker_push
-	for svc in $(SERVICES); do \
-		docker push $(SMQ_DOCKER_IMAGE_NAME_PREFIX)/$$svc:$(1); \
-	done
-endef
-
-changelog:
-	git log $(shell git describe --tags --abbrev=0)..HEAD --pretty=format:"- %s"
-
-latest: dockers
-	$(call docker_push,latest)
-
-release:
-	$(eval version = $(shell git describe --abbrev=0 --tags))
-	git checkout $(version)
-	$(MAKE) dockers
-	for svc in $(SERVICES); do \
-		docker tag $(SMQ_DOCKER_IMAGE_NAME_PREFIX)/$$svc $(SMQ_DOCKER_IMAGE_NAME_PREFIX)/$$svc:$(version); \
-	done
-	$(call docker_push,$(version))
-
-rundev:
-	cd scripts && ./run.sh
-
-grpc_mtls_certs:
-	$(MAKE) -C docker/ssl auth_grpc_certs clients_grpc_certs
-
-check_tls:
-ifeq ($(GRPC_TLS),true)
-	@echo "gRPC TLS is enabled"
-	$(eval GRPC_MTLS :=)
-else
-	$(eval GRPC_TLS :=)
-endif
-
-check_mtls:
-ifeq ($(GRPC_MTLS),true)
-	@echo "gRPC MTLS is enabled"
-	$(eval GRPC_TLS :=)
-else
-	$(eval GRPC_MTLS :=)
-endif
-
-check_certs: check_mtls check_tls
-ifeq ($(GRPC_MTLS_CERT_FILES_EXISTS),0)
-ifeq ($(filter true,$(GRPC_MTLS) $(GRPC_TLS)),true)
-ifeq ($(filter $(DEFAULT_DOCKER_COMPOSE_COMMAND),$(DOCKER_COMPOSE_COMMAND)),$(DEFAULT_DOCKER_COMPOSE_COMMAND))
-	$(MAKE) -C docker/ssl auth_grpc_certs clients_grpc_certs
-endif
-endif
-endif
-
-fetch_certs:
-	@./scripts/certs.sh
-
-run: check_certs
-	docker compose -f docker/docker-compose.yaml --env-file docker/.env -p $(DOCKER_PROJECT) $(DOCKER_COMPOSE_COMMAND) $(args)
-
-run_addons: check_certs
-	$(foreach SVC,$(RUN_ADDON_ARGS),$(if $(filter $(SVC),$(ADDON_SERVICES) $(EXTERNAL_SERVICES)),,$(error Invalid Service $(SVC))))
-	@docker compose -f docker/docker-compose.yaml --env-file ./docker/.env -p $(DOCKER_PROJECT) up -d auth domains jaeger
-	@for SVC in $(RUN_ADDON_ARGS); do \
-		if [ "$$SVC" = "certs" ]; then \
-			docker compose -f docker/addons/$$SVC/docker-compose.yaml -f docker/certs-docker-compose-override.yaml --env-file ./docker/.env --env-file ./docker/addons/$$SVC/.env -p $(DOCKER_PROJECT) $(DOCKER_COMPOSE_COMMAND) $(args) & \
-		else \
-			SMQ_ADDONS_CERTS_PATH_PREFIX="../."  docker compose -f docker/addons/$$SVC/docker-compose.yaml -p $(DOCKER_PROJECT) --env-file ./docker/.env $(DOCKER_COMPOSE_COMMAND) $(args) & \
-		fi; \
-	done
-
-run_live: check_certs
-	GOPATH=$(go env GOPATH) docker compose  -f docker/docker-compose.yaml -f docker/docker-compose-live.yaml --env-file docker/.env -p $(DOCKER_PROJECT) $(DOCKER_COMPOSE_COMMAND) $(args)

README.md

@@ -1,118 +0,0 @@
-<div align="center">
-
-  # SuperMQ
-  
-  **Planetary event-driven infrastructure**
-  
-  **Made with ❤️ by [Abstract Machines](https://abstractmachines.fr/)**
-  
-  [![Build Status](https://github.com/absmach/supermq/actions/workflows/build.yaml/badge.svg?branch=main)](https://github.com/absmach/supermq/actions/workflows/build.yaml)
-  [![Check License Header](https://github.com/absmach/supermq/actions/workflows/check-license.yaml/badge.svg?branch=main)](https://github.com/absmach/supermq/actions/workflows/check-license.yaml)
-  [![Check Generated Files](https://github.com/absmach/supermq/actions/workflows/check-generated-files.yaml/badge.svg?branch=main)](https://github.com/absmach/supermq/actions/workflows/check-generated-files.yaml)
-  [![Go Report Card](https://goreportcard.com/badge/github.com/absmach/supermq)](https://goreportcard.com/report/github.com/absmach/supermq)
-  [![Coverage](https://codecov.io/gh/absmach/supermq/graph/badge.svg?token=nPCEr5nW8S)](https://codecov.io/gh/absmach/supermq)
-  [![License](https://img.shields.io/badge/license-Apache%20v2.0-blue.svg)](LICENSE)
- [![Matrix](https://img.shields.io/matrix/supermq%3Amatrix.org?label=Chat&style=flat&logo=matrix&logoColor=white)](https://matrix.to/#/#supermq:matrix.org)
-  
-  ### [Guide](https://docs.supermq.abstractmachines.fr) | [Contributing](CONTRIBUTING.md) | [Website](https://abstractmachines.fr/) | [Chat](https://matrix.to/#/#supermq:matrix.org)
-
-</div>
-
-
-
-## Introduction 📖
-
-SuperMQ is a distributed, highly scalable, and secure open-source cloud platform for messaging and event-driven architecture (EDA). It is a planetarily distributed, highly scalable, and secure platform that serves as a robust foundation for building advanced real-time and reactive systems.
-
-## Why SuperMQ Stands Out 🚀
-
-SuperMQ bridges the gap between various network protocols (HTTP, MQTT, WebSocket, CoAP, and more) to provide a seamless messaging experience. Whether you're working on IoT solutions, real-time data pipelines, or event-driven systems, SuperMQ has you covered. 🌐✨
-
-## Key Features 🌟
-
-- **Multi-Protocol Connectivity**: HTTP, MQTT, WebSocket, CoAP, and more! 🌉
-- **Secure by Design**: Mutual TLS (mTLS) with X.509 Certificates, JWT support, and multi-protocol authorization. 🔒
-- **Fine-Grained Access Control**: Support for ABAC and RBAC policies. 📜
-- **Multi-Tenant**: Manage multiple domains seamlessly. 🏢
-- **Multi-User**: Unlimited organizational hierarchies for user management. 👥
-- **Application Management**: Group and share messaging clients for streamlined operations. 📱
-- **Ease of Use**: Simple and powerful communication channel management, grouping, and sharing. ✨
-- **Personal Access Tokens (PATs)**: Scoped and revocable tokens for enhanced security. 🔑
-- **Observability**: Integrated logging and instrumentation with Prometheus and OpenTelemetry. 📈
-- **Event Sourcing**: Build robust and scalable architectures. ⚡
-- **Edge and IoT Ready**: Supports MQTT and CoAP protocols for seamless IoT gateway and sensor communication and management. 🌍
-- **Developer-Friendly**: SDKs, CLI tools, and comprehensive documentation to get you started. 👩‍💻👨‍💻
-- **Production-Ready**: Container-based deployment using Docker and Kubernetes. 🐳☸️
-
-## Installation 🛠️
-
-Clone the repository and start SuperMQ services:
-
-```bash
-git clone https://github.com/absmach/supermq.git
-cd supermq
-docker compose -f docker/docker-compose.yaml --env-file docker/.env up
-```
-
-Or use the [Makefile](Makefile) for a simpler command:
-
-```bash
-make run
-```
-
-For production deployments, check our [Kubernetes guide](https://docs.supermq.abstractmachines.fr/kubernetes). ⚙️
-
-### Usage 📤📥
-
-#### Using the CLI:
-
-```bash
-make cli
-./build/supermq-cli status
-```
-
-This command retrieves the status of the SuperMQ server and outputs it to the console.
-
-#### Using HTTP with Curl:
-
-```bash
-curl -X GET http://localhost:8080/status
-```
-
-This request fetches the server status over HTTP and provides a JSON response.
-
-See our [CLI documentation](https://docs.supermq.abstractmachines.fr/cli) for more details.
-
-## Documentation 📚
-
-The official documentation is hosted at [SuperMQ docs page](https://docs.supermq.abstractmachines.fr).
-
-Documentation is auto-generated, check out the instructions in the [docs repository](https://github.com/absmach/supermq-docs).
-If you spot an error or a need for corrections, please let us know - or even better: send us a PR! 💌
-
-## Community and Contributing 🤝
-
-Thank you for your interest in SuperMQ and the desire to contribute!
-
-1. Take a look at our [open issues](https://github.com/absmach/supermq/issues). The [good-first-issue](https://github.com/absmach/supermq/labels/good-first-issue) label is specifically for issues that are great for getting started.
-2. Checkout the [contribution guide](CONTRIBUTING.md) to learn more about our style and conventions.
-3. Make your changes compatible to our workflow.
-
-Join our community:
-
-- [Matrix Room](https://matrix.to/#/#supermq\:matrix.org)
-
-## Professional Support 💼
-
-Need help deploying SuperMQ or integrating it into your system? Reach out to **[Abstract Machines](https://abstractmachines.fr/)** for professional support and guidance.
-
-## License 📜
-
-SuperMQ is open-source software licensed under the [Apache License 2.0](LICENSE). Contributions are welcome!
-
-## Acknowledgments 🙌
-
-Special thanks to the amazing contributors who make SuperMQ possible. Check out the [MAINTAINERS](MAINTAINERS) file to see the team behind the magic.
-
-Ready to build the future of messaging and event-driven systems? Let's get started! 🚀
-

alarms.yaml

@@ -0,0 +1,508 @@
+# Copyright (c) Abstract Machines
+# SPDX-License-Identifier: Apache-2.0
+
+openapi: 3.0.1
+info:
+  title: Magistrala Alarms API
+  description: |
+    HTTP API for managing alarms service.
+    Some useful links:
+    - [The Magistrala repository](https://github.com/absmach/magistrala)
+  contact:
+    email: info@absmach.eu
+  license:
+    name: Apache 2.0
+    url: https://github.com/absmach/magistrala/blob/main/LICENSE
+  version: 0.18.5
+
+servers:
+  - url: http://localhost:8050
+  - url: https://localhost:8050
+
+tags:
+  - name: alarms
+    description: Everything about your Alarms
+    externalDocs:
+      description: Find out more about alarms
+      url: https://magistrala.absmach.eu/docs/
+
+paths:
+  /{domainID}/alarms:
+    get:
+      operationId: listAlarms
+      summary: List Alarms
+      description: |
+        Retrieves a list of alarms with optional filtering
+      tags:
+        - alarms
+      parameters:
+        - $ref: '#/components/parameters/DomainID'
+        - $ref: '#/components/parameters/Offset'
+        - $ref: '#/components/parameters/Limit'
+        - $ref: '#/components/parameters/Order'
+        - $ref: '#/components/parameters/Dir'
+        - $ref: '#/components/parameters/ChannelID'
+        - $ref: '#/components/parameters/ClientID'
+        - $ref: '#/components/parameters/Subtopic'
+        - $ref: '#/components/parameters/RuleID'
+        - $ref: '#/components/parameters/Status'
+        - $ref: '#/components/parameters/AssigneeID'
+        - $ref: '#/components/parameters/Severity'
+        - $ref: '#/components/parameters/UpdatedBy'
+        - $ref: '#/components/parameters/AssignedBy'
+        - $ref: '#/components/parameters/AcknowledgedBy'
+        - $ref: '#/components/parameters/ResolvedBy'
+        - $ref: '#/components/parameters/CreatedFrom'
+        - $ref: '#/components/parameters/CreatedTo'
+      security:
+        - bearerAuth: []
+      responses:
+        '200':
+          $ref: '#/components/responses/AlarmsPageRes'
+        '400':
+          description: Failed due to malformed query parameters
+        '401':
+          description: Missing or invalid access token
+        '422':
+          description: Database can't process request
+        '500':
+          $ref: '#/components/responses/ServiceError'
+
+  /{domainID}/alarms/{alarmID}:
+    get:
+      operationId: viewAlarm
+      summary: View Alarm
+      description: Retrieves an alarm by ID
+      tags:
+        - alarms
+      parameters:
+        - $ref: '#/components/parameters/DomainID'
+        - $ref: '#/components/parameters/AlarmID'
+      security:
+        - bearerAuth: []
+      responses:
+        '200':
+          $ref: '#/components/responses/AlarmRes'
+        '400':
+          description: Missing or invalid alarm ID
+        '401':
+          description: Missing or invalid access token
+        '403':
+          description: Failed to perform authorization over the entity
+        '404':
+          description: Alarm does not exist
+        '422':
+          description: Database can't process request
+        '500':
+          $ref: '#/components/responses/ServiceError'
+    put:
+      operationId: updateAlarm
+      summary: Update Alarm
+      description: Updates an existing alarm
+      tags:
+        - alarms
+      parameters:
+        - $ref: '#/components/parameters/DomainID'
+        - $ref: '#/components/parameters/AlarmID'
+      security:
+        - bearerAuth: []
+      requestBody:
+        $ref: '#/components/requestBodies/AlarmUpdateReq'
+      responses:
+        '200':
+          $ref: '#/components/responses/AlarmRes'
+        '400':
+          description: Failed due to malformed JSON
+        '401':
+          description: Missing or invalid access token
+        '403':
+          description: Failed to perform authorization over the entity
+        '404':
+          description: Alarm does not exist
+        '415':
+          description: Missing or invalid content type
+        '422':
+          description: Database can't process request
+        '500':
+          $ref: '#/components/responses/ServiceError'
+    delete:
+      operationId: deleteAlarm
+      summary: Delete Alarm
+      description: Deletes an alarm
+      tags:
+        - alarms
+      parameters:
+        - $ref: '#/components/parameters/DomainID'
+        - $ref: '#/components/parameters/AlarmID'
+      security:
+        - bearerAuth: []
+      responses:
+        '204':
+          description: Alarm deleted successfully
+        '400':
+          description: Failed due to malformed alarm ID
+        '401':
+          description: Missing or invalid access token
+        '403':
+          description: Failed to perform authorization over the entity
+        '404':
+          description: Alarm does not exist
+        '422':
+          description: Database can't process request
+        '500':
+          $ref: '#/components/responses/ServiceError'
+
+  /health:
+    get:
+      summary: Retrieves service health check info
+      tags:
+        - health
+      security: []
+      responses:
+        '200':
+          $ref: '#/components/responses/HealthRes'
+        '500':
+          $ref: '#/components/responses/ServiceError'
+
+components:
+  schemas:
+    Alarm:
+      type: object
+      properties:
+        id:
+          type: string
+          description: Unique alarm identifier
+          readOnly: true
+        rule_id:
+          type: string
+          description: Rule ID that triggered this alarm
+        domain_id:
+          type: string
+          description: Domain ID this alarm belongs to
+        channel_id:
+          type: string
+          description: Channel ID where the alarm was triggered
+        client_id:
+          type: string
+          description: Client ID that triggered the alarm
+        subtopic:
+          type: string
+          description: Subtopic associated with the alarm
+        status:
+          type: string
+          description: Alarm status
+          enum: [active, cleared]
+        measurement:
+          type: string
+          description: Measurement that triggered the alarm
+        value:
+          type: string
+          description: Value that triggered the alarm
+        unit:
+          type: string
+          description: Unit of measurement
+        threshold:
+          type: string
+          description: Threshold value that was exceeded
+        cause:
+          type: string
+          description: Cause or description of the alarm
+        severity:
+          type: integer
+          description: Severity level (0-100)
+          minimum: 0
+          maximum: 100
+        assignee_id:
+          type: string
+          description: ID of the user assigned to this alarm
+        created_at:
+          type: string
+          format: date-time
+          description: Creation timestamp
+          readOnly: true
+        updated_at:
+          type: string
+          format: date-time
+          description: Last update timestamp
+          readOnly: true
+        updated_by:
+          type: string
+          description: User who last updated the alarm
+          readOnly: true
+        assigned_at:
+          type: string
+          format: date-time
+          description: When the alarm was assigned
+          readOnly: true
+        assigned_by:
+          type: string
+          description: User who assigned the alarm
+          readOnly: true
+        acknowledged_at:
+          type: string
+          format: date-time
+          description: When the alarm was acknowledged
+          readOnly: true
+        acknowledged_by:
+          type: string
+          description: User who acknowledged the alarm
+          readOnly: true
+        resolved_at:
+          type: string
+          format: date-time
+          description: When the alarm was resolved
+          readOnly: true
+        resolved_by:
+          type: string
+          description: User who resolved the alarm
+          readOnly: true
+        metadata:
+          type: object
+          description: Custom metadata
+          additionalProperties: true
+
+    AlarmsPage:
+      type: object
+      properties:
+        offset:
+          type: integer
+          description: Number of items to skip during retrieval
+          minimum: 0
+          default: 0
+        limit:
+          type: integer
+          description: Size of the subset to retrieve
+          minimum: 1
+          maximum: 1000
+          default: 10
+        total:
+          type: integer
+          description: Total number of results
+          minimum: 0
+        alarms:
+          type: array
+          minItems: 0
+          items:
+            $ref: '#/components/schemas/Alarm'
+      required:
+        - alarms
+        - total
+        - offset
+        - limit
+
+  parameters:
+    DomainID:
+      name: domainID
+      description: Domain ID
+      in: path
+      required: true
+      schema:
+        type: string
+    AlarmID:
+      name: alarmID
+      description: Alarm ID
+      in: path
+      required: true
+      schema:
+        type: string
+    Offset:
+      name: offset
+      description: Number of items to skip
+      in: query
+      required: false
+      schema:
+        type: integer
+        default: 0
+        minimum: 0
+    Limit:
+      name: limit
+      description: Size of the subset to retrieve
+      in: query
+      required: false
+      schema:
+        type: integer
+        default: 10
+        minimum: 1
+        maximum: 1000
+    Order:
+      name: order
+      description: Order by field
+      in: query
+      required: false
+      schema:
+        type: string
+        enum: [created_at, updated_at]
+        default: created_at
+    Dir:
+      name: dir
+      description: Sort direction
+      in: query
+      required: false
+      schema:
+        type: string
+        enum: [asc, desc]
+        default: desc
+    ChannelID:
+      name: channel_id
+      description: Filter by channel ID
+      in: query
+      required: false
+      schema:
+        type: string
+    ClientID:
+      name: client_id
+      description: Filter by client ID
+      in: query
+      required: false
+      schema:
+        type: string
+    Subtopic:
+      name: subtopic
+      description: Filter by subtopic
+      in: query
+      required: false
+      schema:
+        type: string
+    RuleID:
+      name: rule_id
+      description: Filter by rule ID
+      in: query
+      required: false
+      schema:
+        type: string
+    Status:
+      name: status
+      description: Filter by alarm status
+      in: query
+      required: false
+      schema:
+        type: string
+        enum: [active, cleared, all]
+        default: all
+    AssigneeID:
+      name: assignee_id
+      description: Filter by assignee ID
+      in: query
+      required: false
+      schema:
+        type: string
+    Severity:
+      name: severity
+      description: Filter by severity level
+      in: query
+      required: false
+      schema:
+        type: integer
+        minimum: 0
+        maximum: 100
+    UpdatedBy:
+      name: updated_by
+      description: Filter by user who updated
+      in: query
+      required: false
+      schema:
+        type: string
+    AssignedBy:
+      name: assigned_by
+      description: Filter by user who assigned
+      in: query
+      required: false
+      schema:
+        type: string
+    AcknowledgedBy:
+      name: acknowledged_by
+      description: Filter by user who acknowledged
+      in: query
+      required: false
+      schema:
+        type: string
+    ResolvedBy:
+      name: resolved_by
+      description: Filter by user who resolved
+      in: query
+      required: false
+      schema:
+        type: string
+    CreatedFrom:
+      name: created_from
+      description: Filter alarms created after this time (RFC3339 format)
+      in: query
+      required: false
+      schema:
+        type: string
+        format: date-time
+    CreatedTo:
+      name: created_to
+      description: Filter alarms created before this time (RFC3339 format)
+      in: query
+      required: false
+      schema:
+        type: string
+        format: date-time
+
+  requestBodies:
+    AlarmUpdateReq:
+      description: JSON-formatted document describing the alarm update
+      required: true
+      content:
+        application/json:
+          schema:
+            type: object
+            properties:
+              status:
+                type: string
+                description: Alarm status
+                enum: [active, cleared]
+              assignee_id:
+                type: string
+                description: ID of the user assigned to this alarm
+              severity:
+                type: integer
+                description: Severity level (0-100)
+                minimum: 0
+                maximum: 100
+              metadata:
+                type: object
+                description: Custom metadata
+                additionalProperties: true
+
+  responses:
+    AlarmRes:
+      description: Alarm data retrieved
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/Alarm'
+      links:
+        update:
+          operationId: updateAlarm
+          parameters:
+            alarmID: $response.body#/id
+            domainID: $response.body#/domain_id
+        delete:
+          operationId: deleteAlarm
+          parameters:
+            alarmID: $response.body#/id
+            domainID: $response.body#/domain_id
+    AlarmsPageRes:
+      description: Alarms page retrieved
+      content:
+        application/json:
+          schema:
+            $ref: '#/components/schemas/AlarmsPage'
+    ServiceError:
+      description: Unexpected server-side error occurred
+    HealthRes:
+      description: Service Health Check
+      content:
+        application/health+json:
+          schema:
+            $ref: "./schemas/health_info.yaml"
+
+  securitySchemes:
+    bearerAuth:
+      type: http
+      scheme: bearer
+      bearerFormat: JWT
+      description: |
+        * Users access: "Authorization: Bearer <user_token>"

api.go

@@ -1,16 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package supermq
-
-// Response contains HTTP response specific methods.
-type Response interface {
-	// Code returns HTTP response code.
-	Code() int
-
-	// Headers returns map of HTTP headers with their values.
-	Headers() map[string]string
-
-	// Empty indicates if HTTP response has content.
-	Empty() bool
-}

api/doc.go

@@ -1,6 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package api contains commonly used constants and functions
-// for the HTTP and gRPC API.
-package api

api/grpc/auth/v1/auth.pb.go

@@ -1,485 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: auth/v1/auth.proto
-
-package v1
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type AuthNReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Token         string                 `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthNReq) Reset() {
-	*x = AuthNReq{}
-	mi := &file_auth_v1_auth_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthNReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthNReq) ProtoMessage() {}
-
-func (x *AuthNReq) ProtoReflect() protoreflect.Message {
-	mi := &file_auth_v1_auth_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthNReq.ProtoReflect.Descriptor instead.
-func (*AuthNReq) Descriptor() ([]byte, []int) {
-	return file_auth_v1_auth_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *AuthNReq) GetToken() string {
-	if x != nil {
-		return x.Token
-	}
-	return ""
-}
-
-type AuthNRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`                              // token id
-	UserId        string                 `protobuf:"bytes,2,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`        // user id
-	UserRole      uint32                 `protobuf:"varint,3,opt,name=user_role,json=userRole,proto3" json:"user_role,omitempty"` // user role
-	Verified      bool                   `protobuf:"varint,4,opt,name=verified,proto3" json:"verified,omitempty"`                 // verified user
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthNRes) Reset() {
-	*x = AuthNRes{}
-	mi := &file_auth_v1_auth_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthNRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthNRes) ProtoMessage() {}
-
-func (x *AuthNRes) ProtoReflect() protoreflect.Message {
-	mi := &file_auth_v1_auth_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthNRes.ProtoReflect.Descriptor instead.
-func (*AuthNRes) Descriptor() ([]byte, []int) {
-	return file_auth_v1_auth_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *AuthNRes) GetId() string {
-	if x != nil {
-		return x.Id
-	}
-	return ""
-}
-
-func (x *AuthNRes) GetUserId() string {
-	if x != nil {
-		return x.UserId
-	}
-	return ""
-}
-
-func (x *AuthNRes) GetUserRole() uint32 {
-	if x != nil {
-		return x.UserRole
-	}
-	return 0
-}
-
-func (x *AuthNRes) GetVerified() bool {
-	if x != nil {
-		return x.Verified
-	}
-	return false
-}
-
-type AuthZReq struct {
-	state           protoimpl.MessageState `protogen:"open.v1"`
-	Domain          string                 `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`                                          // Domain
-	SubjectType     string                 `protobuf:"bytes,2,opt,name=subject_type,json=subjectType,proto3" json:"subject_type,omitempty"`             // Client or User
-	SubjectKind     string                 `protobuf:"bytes,3,opt,name=subject_kind,json=subjectKind,proto3" json:"subject_kind,omitempty"`             // ID or Token
-	SubjectRelation string                 `protobuf:"bytes,4,opt,name=subject_relation,json=subjectRelation,proto3" json:"subject_relation,omitempty"` // Subject relation
-	Subject         string                 `protobuf:"bytes,5,opt,name=subject,proto3" json:"subject,omitempty"`                                        // Subject value (id or token, depending on kind)
-	Relation        string                 `protobuf:"bytes,6,opt,name=relation,proto3" json:"relation,omitempty"`                                      // Relation to filter
-	Permission      string                 `protobuf:"bytes,7,opt,name=permission,proto3" json:"permission,omitempty"`                                  // Action
-	Object          string                 `protobuf:"bytes,8,opt,name=object,proto3" json:"object,omitempty"`                                          // Object ID
-	ObjectType      string                 `protobuf:"bytes,9,opt,name=object_type,json=objectType,proto3" json:"object_type,omitempty"`                // Client, User, Group
-	unknownFields   protoimpl.UnknownFields
-	sizeCache       protoimpl.SizeCache
-}
-
-func (x *AuthZReq) Reset() {
-	*x = AuthZReq{}
-	mi := &file_auth_v1_auth_proto_msgTypes[2]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthZReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthZReq) ProtoMessage() {}
-
-func (x *AuthZReq) ProtoReflect() protoreflect.Message {
-	mi := &file_auth_v1_auth_proto_msgTypes[2]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthZReq.ProtoReflect.Descriptor instead.
-func (*AuthZReq) Descriptor() ([]byte, []int) {
-	return file_auth_v1_auth_proto_rawDescGZIP(), []int{2}
-}
-
-func (x *AuthZReq) GetDomain() string {
-	if x != nil {
-		return x.Domain
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetSubjectType() string {
-	if x != nil {
-		return x.SubjectType
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetSubjectKind() string {
-	if x != nil {
-		return x.SubjectKind
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetSubjectRelation() string {
-	if x != nil {
-		return x.SubjectRelation
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetSubject() string {
-	if x != nil {
-		return x.Subject
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetRelation() string {
-	if x != nil {
-		return x.Relation
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetPermission() string {
-	if x != nil {
-		return x.Permission
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetObject() string {
-	if x != nil {
-		return x.Object
-	}
-	return ""
-}
-
-func (x *AuthZReq) GetObjectType() string {
-	if x != nil {
-		return x.ObjectType
-	}
-	return ""
-}
-
-type AuthZPatReq struct {
-	state            protoimpl.MessageState `protogen:"open.v1"`
-	UserId           string                 `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`                                 // User id
-	PatId            string                 `protobuf:"bytes,2,opt,name=pat_id,json=patId,proto3" json:"pat_id,omitempty"`                                    // Pat id
-	EntityType       uint32                 `protobuf:"varint,3,opt,name=entity_type,json=entityType,proto3" json:"entity_type,omitempty"`                    // Entity type
-	OptionalDomainId string                 `protobuf:"bytes,4,opt,name=optional_domain_id,json=optionalDomainId,proto3" json:"optional_domain_id,omitempty"` // Optional domain id
-	Operation        uint32                 `protobuf:"varint,6,opt,name=operation,proto3" json:"operation,omitempty"`                                        // Operation
-	EntityId         string                 `protobuf:"bytes,7,opt,name=entity_id,json=entityId,proto3" json:"entity_id,omitempty"`                           // EntityID
-	unknownFields    protoimpl.UnknownFields
-	sizeCache        protoimpl.SizeCache
-}
-
-func (x *AuthZPatReq) Reset() {
-	*x = AuthZPatReq{}
-	mi := &file_auth_v1_auth_proto_msgTypes[3]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthZPatReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthZPatReq) ProtoMessage() {}
-
-func (x *AuthZPatReq) ProtoReflect() protoreflect.Message {
-	mi := &file_auth_v1_auth_proto_msgTypes[3]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthZPatReq.ProtoReflect.Descriptor instead.
-func (*AuthZPatReq) Descriptor() ([]byte, []int) {
-	return file_auth_v1_auth_proto_rawDescGZIP(), []int{3}
-}
-
-func (x *AuthZPatReq) GetUserId() string {
-	if x != nil {
-		return x.UserId
-	}
-	return ""
-}
-
-func (x *AuthZPatReq) GetPatId() string {
-	if x != nil {
-		return x.PatId
-	}
-	return ""
-}
-
-func (x *AuthZPatReq) GetEntityType() uint32 {
-	if x != nil {
-		return x.EntityType
-	}
-	return 0
-}
-
-func (x *AuthZPatReq) GetOptionalDomainId() string {
-	if x != nil {
-		return x.OptionalDomainId
-	}
-	return ""
-}
-
-func (x *AuthZPatReq) GetOperation() uint32 {
-	if x != nil {
-		return x.Operation
-	}
-	return 0
-}
-
-func (x *AuthZPatReq) GetEntityId() string {
-	if x != nil {
-		return x.EntityId
-	}
-	return ""
-}
-
-type AuthZRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Authorized    bool                   `protobuf:"varint,1,opt,name=authorized,proto3" json:"authorized,omitempty"`
-	Id            string                 `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthZRes) Reset() {
-	*x = AuthZRes{}
-	mi := &file_auth_v1_auth_proto_msgTypes[4]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthZRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthZRes) ProtoMessage() {}
-
-func (x *AuthZRes) ProtoReflect() protoreflect.Message {
-	mi := &file_auth_v1_auth_proto_msgTypes[4]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthZRes.ProtoReflect.Descriptor instead.
-func (*AuthZRes) Descriptor() ([]byte, []int) {
-	return file_auth_v1_auth_proto_rawDescGZIP(), []int{4}
-}
-
-func (x *AuthZRes) GetAuthorized() bool {
-	if x != nil {
-		return x.Authorized
-	}
-	return false
-}
-
-func (x *AuthZRes) GetId() string {
-	if x != nil {
-		return x.Id
-	}
-	return ""
-}
-
-var File_auth_v1_auth_proto protoreflect.FileDescriptor
-
-const file_auth_v1_auth_proto_rawDesc = "" +
-	"\n" +
-	"\x12auth/v1/auth.proto\x12\aauth.v1\" \n" +
-	"\bAuthNReq\x12\x14\n" +
-	"\x05token\x18\x01 \x01(\tR\x05token\"l\n" +
-	"\bAuthNRes\x12\x0e\n" +
-	"\x02id\x18\x01 \x01(\tR\x02id\x12\x17\n" +
-	"\auser_id\x18\x02 \x01(\tR\x06userId\x12\x1b\n" +
-	"\tuser_role\x18\x03 \x01(\rR\buserRole\x12\x1a\n" +
-	"\bverified\x18\x04 \x01(\bR\bverified\"\xa2\x02\n" +
-	"\bAuthZReq\x12\x16\n" +
-	"\x06domain\x18\x01 \x01(\tR\x06domain\x12!\n" +
-	"\fsubject_type\x18\x02 \x01(\tR\vsubjectType\x12!\n" +
-	"\fsubject_kind\x18\x03 \x01(\tR\vsubjectKind\x12)\n" +
-	"\x10subject_relation\x18\x04 \x01(\tR\x0fsubjectRelation\x12\x18\n" +
-	"\asubject\x18\x05 \x01(\tR\asubject\x12\x1a\n" +
-	"\brelation\x18\x06 \x01(\tR\brelation\x12\x1e\n" +
-	"\n" +
-	"permission\x18\a \x01(\tR\n" +
-	"permission\x12\x16\n" +
-	"\x06object\x18\b \x01(\tR\x06object\x12\x1f\n" +
-	"\vobject_type\x18\t \x01(\tR\n" +
-	"objectType\"\xc7\x01\n" +
-	"\vAuthZPatReq\x12\x17\n" +
-	"\auser_id\x18\x01 \x01(\tR\x06userId\x12\x15\n" +
-	"\x06pat_id\x18\x02 \x01(\tR\x05patId\x12\x1f\n" +
-	"\ventity_type\x18\x03 \x01(\rR\n" +
-	"entityType\x12,\n" +
-	"\x12optional_domain_id\x18\x04 \x01(\tR\x10optionalDomainId\x12\x1c\n" +
-	"\toperation\x18\x06 \x01(\rR\toperation\x12\x1b\n" +
-	"\tentity_id\x18\a \x01(\tR\bentityId\":\n" +
-	"\bAuthZRes\x12\x1e\n" +
-	"\n" +
-	"authorized\x18\x01 \x01(\bR\n" +
-	"authorized\x12\x0e\n" +
-	"\x02id\x18\x02 \x01(\tR\x02id2\xf0\x01\n" +
-	"\vAuthService\x123\n" +
-	"\tAuthorize\x12\x11.auth.v1.AuthZReq\x1a\x11.auth.v1.AuthZRes\"\x00\x129\n" +
-	"\fAuthorizePAT\x12\x14.auth.v1.AuthZPatReq\x1a\x11.auth.v1.AuthZRes\"\x00\x126\n" +
-	"\fAuthenticate\x12\x11.auth.v1.AuthNReq\x1a\x11.auth.v1.AuthNRes\"\x00\x129\n" +
-	"\x0fAuthenticatePAT\x12\x11.auth.v1.AuthNReq\x1a\x11.auth.v1.AuthNRes\"\x00B-Z+github.com/absmach/supermq/api/grpc/auth/v1b\x06proto3"
-
-var (
-	file_auth_v1_auth_proto_rawDescOnce sync.Once
-	file_auth_v1_auth_proto_rawDescData []byte
-)
-
-func file_auth_v1_auth_proto_rawDescGZIP() []byte {
-	file_auth_v1_auth_proto_rawDescOnce.Do(func() {
-		file_auth_v1_auth_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_auth_v1_auth_proto_rawDesc), len(file_auth_v1_auth_proto_rawDesc)))
-	})
-	return file_auth_v1_auth_proto_rawDescData
-}
-
-var file_auth_v1_auth_proto_msgTypes = make([]protoimpl.MessageInfo, 5)
-var file_auth_v1_auth_proto_goTypes = []any{
-	(*AuthNReq)(nil),    // 0: auth.v1.AuthNReq
-	(*AuthNRes)(nil),    // 1: auth.v1.AuthNRes
-	(*AuthZReq)(nil),    // 2: auth.v1.AuthZReq
-	(*AuthZPatReq)(nil), // 3: auth.v1.AuthZPatReq
-	(*AuthZRes)(nil),    // 4: auth.v1.AuthZRes
-}
-var file_auth_v1_auth_proto_depIdxs = []int32{
-	2, // 0: auth.v1.AuthService.Authorize:input_type -> auth.v1.AuthZReq
-	3, // 1: auth.v1.AuthService.AuthorizePAT:input_type -> auth.v1.AuthZPatReq
-	0, // 2: auth.v1.AuthService.Authenticate:input_type -> auth.v1.AuthNReq
-	0, // 3: auth.v1.AuthService.AuthenticatePAT:input_type -> auth.v1.AuthNReq
-	4, // 4: auth.v1.AuthService.Authorize:output_type -> auth.v1.AuthZRes
-	4, // 5: auth.v1.AuthService.AuthorizePAT:output_type -> auth.v1.AuthZRes
-	1, // 6: auth.v1.AuthService.Authenticate:output_type -> auth.v1.AuthNRes
-	1, // 7: auth.v1.AuthService.AuthenticatePAT:output_type -> auth.v1.AuthNRes
-	4, // [4:8] is the sub-list for method output_type
-	0, // [0:4] is the sub-list for method input_type
-	0, // [0:0] is the sub-list for extension type_name
-	0, // [0:0] is the sub-list for extension extendee
-	0, // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_auth_v1_auth_proto_init() }
-func file_auth_v1_auth_proto_init() {
-	if File_auth_v1_auth_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_auth_v1_auth_proto_rawDesc), len(file_auth_v1_auth_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   5,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_auth_v1_auth_proto_goTypes,
-		DependencyIndexes: file_auth_v1_auth_proto_depIdxs,
-		MessageInfos:      file_auth_v1_auth_proto_msgTypes,
-	}.Build()
-	File_auth_v1_auth_proto = out.File
-	file_auth_v1_auth_proto_goTypes = nil
-	file_auth_v1_auth_proto_depIdxs = nil
-}

api/grpc/auth/v1/auth_grpc.pb.go

@@ -1,244 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.0
-// source: auth/v1/auth.proto
-
-package v1
-
-import (
-	context "context"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	AuthService_Authorize_FullMethodName       = "/auth.v1.AuthService/Authorize"
-	AuthService_AuthorizePAT_FullMethodName    = "/auth.v1.AuthService/AuthorizePAT"
-	AuthService_Authenticate_FullMethodName    = "/auth.v1.AuthService/Authenticate"
-	AuthService_AuthenticatePAT_FullMethodName = "/auth.v1.AuthService/AuthenticatePAT"
-)
-
-// AuthServiceClient is the client API for AuthService service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// AuthService is a service that provides authentication
-// and authorization functionalities for SuperMQ services.
-type AuthServiceClient interface {
-	Authorize(ctx context.Context, in *AuthZReq, opts ...grpc.CallOption) (*AuthZRes, error)
-	AuthorizePAT(ctx context.Context, in *AuthZPatReq, opts ...grpc.CallOption) (*AuthZRes, error)
-	Authenticate(ctx context.Context, in *AuthNReq, opts ...grpc.CallOption) (*AuthNRes, error)
-	AuthenticatePAT(ctx context.Context, in *AuthNReq, opts ...grpc.CallOption) (*AuthNRes, error)
-}
-
-type authServiceClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewAuthServiceClient(cc grpc.ClientConnInterface) AuthServiceClient {
-	return &authServiceClient{cc}
-}
-
-func (c *authServiceClient) Authorize(ctx context.Context, in *AuthZReq, opts ...grpc.CallOption) (*AuthZRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(AuthZRes)
-	err := c.cc.Invoke(ctx, AuthService_Authorize_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *authServiceClient) AuthorizePAT(ctx context.Context, in *AuthZPatReq, opts ...grpc.CallOption) (*AuthZRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(AuthZRes)
-	err := c.cc.Invoke(ctx, AuthService_AuthorizePAT_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *authServiceClient) Authenticate(ctx context.Context, in *AuthNReq, opts ...grpc.CallOption) (*AuthNRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(AuthNRes)
-	err := c.cc.Invoke(ctx, AuthService_Authenticate_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *authServiceClient) AuthenticatePAT(ctx context.Context, in *AuthNReq, opts ...grpc.CallOption) (*AuthNRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(AuthNRes)
-	err := c.cc.Invoke(ctx, AuthService_AuthenticatePAT_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// AuthServiceServer is the server API for AuthService service.
-// All implementations must embed UnimplementedAuthServiceServer
-// for forward compatibility.
-//
-// AuthService is a service that provides authentication
-// and authorization functionalities for SuperMQ services.
-type AuthServiceServer interface {
-	Authorize(context.Context, *AuthZReq) (*AuthZRes, error)
-	AuthorizePAT(context.Context, *AuthZPatReq) (*AuthZRes, error)
-	Authenticate(context.Context, *AuthNReq) (*AuthNRes, error)
-	AuthenticatePAT(context.Context, *AuthNReq) (*AuthNRes, error)
-	mustEmbedUnimplementedAuthServiceServer()
-}
-
-// UnimplementedAuthServiceServer must be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedAuthServiceServer struct{}
-
-func (UnimplementedAuthServiceServer) Authorize(context.Context, *AuthZReq) (*AuthZRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method Authorize not implemented")
-}
-func (UnimplementedAuthServiceServer) AuthorizePAT(context.Context, *AuthZPatReq) (*AuthZRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method AuthorizePAT not implemented")
-}
-func (UnimplementedAuthServiceServer) Authenticate(context.Context, *AuthNReq) (*AuthNRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method Authenticate not implemented")
-}
-func (UnimplementedAuthServiceServer) AuthenticatePAT(context.Context, *AuthNReq) (*AuthNRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method AuthenticatePAT not implemented")
-}
-func (UnimplementedAuthServiceServer) mustEmbedUnimplementedAuthServiceServer() {}
-func (UnimplementedAuthServiceServer) testEmbeddedByValue()                     {}
-
-// UnsafeAuthServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to AuthServiceServer will
-// result in compilation errors.
-type UnsafeAuthServiceServer interface {
-	mustEmbedUnimplementedAuthServiceServer()
-}
-
-func RegisterAuthServiceServer(s grpc.ServiceRegistrar, srv AuthServiceServer) {
-	// If the following call pancis, it indicates UnimplementedAuthServiceServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&AuthService_ServiceDesc, srv)
-}
-
-func _AuthService_Authorize_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(AuthZReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(AuthServiceServer).Authorize(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: AuthService_Authorize_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AuthServiceServer).Authorize(ctx, req.(*AuthZReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _AuthService_AuthorizePAT_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(AuthZPatReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(AuthServiceServer).AuthorizePAT(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: AuthService_AuthorizePAT_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AuthServiceServer).AuthorizePAT(ctx, req.(*AuthZPatReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _AuthService_Authenticate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(AuthNReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(AuthServiceServer).Authenticate(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: AuthService_Authenticate_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AuthServiceServer).Authenticate(ctx, req.(*AuthNReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _AuthService_AuthenticatePAT_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(AuthNReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(AuthServiceServer).AuthenticatePAT(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: AuthService_AuthenticatePAT_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(AuthServiceServer).AuthenticatePAT(ctx, req.(*AuthNReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// AuthService_ServiceDesc is the grpc.ServiceDesc for AuthService service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var AuthService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "auth.v1.AuthService",
-	HandlerType: (*AuthServiceServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "Authorize",
-			Handler:    _AuthService_Authorize_Handler,
-		},
-		{
-			MethodName: "AuthorizePAT",
-			Handler:    _AuthService_AuthorizePAT_Handler,
-		},
-		{
-			MethodName: "Authenticate",
-			Handler:    _AuthService_Authenticate_Handler,
-		},
-		{
-			MethodName: "AuthenticatePAT",
-			Handler:    _AuthService_AuthenticatePAT_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "auth/v1/auth.proto",
-}

api/grpc/channels/v1/channels.pb.go

@@ -1,402 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: channels/v1/channels.proto
-
-package v1
-
-import (
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type RemoveClientConnectionsReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	ClientId      string                 `protobuf:"bytes,1,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RemoveClientConnectionsReq) Reset() {
-	*x = RemoveClientConnectionsReq{}
-	mi := &file_channels_v1_channels_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RemoveClientConnectionsReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RemoveClientConnectionsReq) ProtoMessage() {}
-
-func (x *RemoveClientConnectionsReq) ProtoReflect() protoreflect.Message {
-	mi := &file_channels_v1_channels_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RemoveClientConnectionsReq.ProtoReflect.Descriptor instead.
-func (*RemoveClientConnectionsReq) Descriptor() ([]byte, []int) {
-	return file_channels_v1_channels_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *RemoveClientConnectionsReq) GetClientId() string {
-	if x != nil {
-		return x.ClientId
-	}
-	return ""
-}
-
-type RemoveClientConnectionsRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RemoveClientConnectionsRes) Reset() {
-	*x = RemoveClientConnectionsRes{}
-	mi := &file_channels_v1_channels_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RemoveClientConnectionsRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RemoveClientConnectionsRes) ProtoMessage() {}
-
-func (x *RemoveClientConnectionsRes) ProtoReflect() protoreflect.Message {
-	mi := &file_channels_v1_channels_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RemoveClientConnectionsRes.ProtoReflect.Descriptor instead.
-func (*RemoveClientConnectionsRes) Descriptor() ([]byte, []int) {
-	return file_channels_v1_channels_proto_rawDescGZIP(), []int{1}
-}
-
-type UnsetParentGroupFromChannelsReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	ParentGroupId string                 `protobuf:"bytes,1,opt,name=parent_group_id,json=parentGroupId,proto3" json:"parent_group_id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *UnsetParentGroupFromChannelsReq) Reset() {
-	*x = UnsetParentGroupFromChannelsReq{}
-	mi := &file_channels_v1_channels_proto_msgTypes[2]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *UnsetParentGroupFromChannelsReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*UnsetParentGroupFromChannelsReq) ProtoMessage() {}
-
-func (x *UnsetParentGroupFromChannelsReq) ProtoReflect() protoreflect.Message {
-	mi := &file_channels_v1_channels_proto_msgTypes[2]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use UnsetParentGroupFromChannelsReq.ProtoReflect.Descriptor instead.
-func (*UnsetParentGroupFromChannelsReq) Descriptor() ([]byte, []int) {
-	return file_channels_v1_channels_proto_rawDescGZIP(), []int{2}
-}
-
-func (x *UnsetParentGroupFromChannelsReq) GetParentGroupId() string {
-	if x != nil {
-		return x.ParentGroupId
-	}
-	return ""
-}
-
-type UnsetParentGroupFromChannelsRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *UnsetParentGroupFromChannelsRes) Reset() {
-	*x = UnsetParentGroupFromChannelsRes{}
-	mi := &file_channels_v1_channels_proto_msgTypes[3]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *UnsetParentGroupFromChannelsRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*UnsetParentGroupFromChannelsRes) ProtoMessage() {}
-
-func (x *UnsetParentGroupFromChannelsRes) ProtoReflect() protoreflect.Message {
-	mi := &file_channels_v1_channels_proto_msgTypes[3]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use UnsetParentGroupFromChannelsRes.ProtoReflect.Descriptor instead.
-func (*UnsetParentGroupFromChannelsRes) Descriptor() ([]byte, []int) {
-	return file_channels_v1_channels_proto_rawDescGZIP(), []int{3}
-}
-
-type AuthzReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	DomainId      string                 `protobuf:"bytes,1,opt,name=domain_id,json=domainId,proto3" json:"domain_id,omitempty"`
-	ClientId      string                 `protobuf:"bytes,2,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
-	ClientType    string                 `protobuf:"bytes,3,opt,name=client_type,json=clientType,proto3" json:"client_type,omitempty"`
-	ChannelId     string                 `protobuf:"bytes,4,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
-	Type          uint32                 `protobuf:"varint,5,opt,name=type,proto3" json:"type,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthzReq) Reset() {
-	*x = AuthzReq{}
-	mi := &file_channels_v1_channels_proto_msgTypes[4]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthzReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthzReq) ProtoMessage() {}
-
-func (x *AuthzReq) ProtoReflect() protoreflect.Message {
-	mi := &file_channels_v1_channels_proto_msgTypes[4]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthzReq.ProtoReflect.Descriptor instead.
-func (*AuthzReq) Descriptor() ([]byte, []int) {
-	return file_channels_v1_channels_proto_rawDescGZIP(), []int{4}
-}
-
-func (x *AuthzReq) GetDomainId() string {
-	if x != nil {
-		return x.DomainId
-	}
-	return ""
-}
-
-func (x *AuthzReq) GetClientId() string {
-	if x != nil {
-		return x.ClientId
-	}
-	return ""
-}
-
-func (x *AuthzReq) GetClientType() string {
-	if x != nil {
-		return x.ClientType
-	}
-	return ""
-}
-
-func (x *AuthzReq) GetChannelId() string {
-	if x != nil {
-		return x.ChannelId
-	}
-	return ""
-}
-
-func (x *AuthzReq) GetType() uint32 {
-	if x != nil {
-		return x.Type
-	}
-	return 0
-}
-
-type AuthzRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Authorized    bool                   `protobuf:"varint,1,opt,name=authorized,proto3" json:"authorized,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthzRes) Reset() {
-	*x = AuthzRes{}
-	mi := &file_channels_v1_channels_proto_msgTypes[5]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthzRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthzRes) ProtoMessage() {}
-
-func (x *AuthzRes) ProtoReflect() protoreflect.Message {
-	mi := &file_channels_v1_channels_proto_msgTypes[5]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthzRes.ProtoReflect.Descriptor instead.
-func (*AuthzRes) Descriptor() ([]byte, []int) {
-	return file_channels_v1_channels_proto_rawDescGZIP(), []int{5}
-}
-
-func (x *AuthzRes) GetAuthorized() bool {
-	if x != nil {
-		return x.Authorized
-	}
-	return false
-}
-
-var File_channels_v1_channels_proto protoreflect.FileDescriptor
-
-const file_channels_v1_channels_proto_rawDesc = "" +
-	"\n" +
-	"\x1achannels/v1/channels.proto\x12\vchannels.v1\x1a\x16common/v1/common.proto\"9\n" +
-	"\x1aRemoveClientConnectionsReq\x12\x1b\n" +
-	"\tclient_id\x18\x01 \x01(\tR\bclientId\"\x1c\n" +
-	"\x1aRemoveClientConnectionsRes\"I\n" +
-	"\x1fUnsetParentGroupFromChannelsReq\x12&\n" +
-	"\x0fparent_group_id\x18\x01 \x01(\tR\rparentGroupId\"!\n" +
-	"\x1fUnsetParentGroupFromChannelsRes\"\x98\x01\n" +
-	"\bAuthzReq\x12\x1b\n" +
-	"\tdomain_id\x18\x01 \x01(\tR\bdomainId\x12\x1b\n" +
-	"\tclient_id\x18\x02 \x01(\tR\bclientId\x12\x1f\n" +
-	"\vclient_type\x18\x03 \x01(\tR\n" +
-	"clientType\x12\x1d\n" +
-	"\n" +
-	"channel_id\x18\x04 \x01(\tR\tchannelId\x12\x12\n" +
-	"\x04type\x18\x05 \x01(\rR\x04type\"*\n" +
-	"\bAuthzRes\x12\x1e\n" +
-	"\n" +
-	"authorized\x18\x01 \x01(\bR\n" +
-	"authorized2\xe1\x03\n" +
-	"\x0fChannelsService\x12;\n" +
-	"\tAuthorize\x12\x15.channels.v1.AuthzReq\x1a\x15.channels.v1.AuthzRes\"\x00\x12m\n" +
-	"\x17RemoveClientConnections\x12'.channels.v1.RemoveClientConnectionsReq\x1a'.channels.v1.RemoveClientConnectionsRes\"\x00\x12|\n" +
-	"\x1cUnsetParentGroupFromChannels\x12,.channels.v1.UnsetParentGroupFromChannelsReq\x1a,.channels.v1.UnsetParentGroupFromChannelsRes\"\x00\x12N\n" +
-	"\x0eRetrieveEntity\x12\x1c.common.v1.RetrieveEntityReq\x1a\x1c.common.v1.RetrieveEntityRes\"\x00\x12T\n" +
-	"\x11RetrieveIDByRoute\x12\x1f.common.v1.RetrieveIDByRouteReq\x1a\x1c.common.v1.RetrieveEntityRes\"\x00B1Z/github.com/absmach/supermq/api/grpc/channels/v1b\x06proto3"
-
-var (
-	file_channels_v1_channels_proto_rawDescOnce sync.Once
-	file_channels_v1_channels_proto_rawDescData []byte
-)
-
-func file_channels_v1_channels_proto_rawDescGZIP() []byte {
-	file_channels_v1_channels_proto_rawDescOnce.Do(func() {
-		file_channels_v1_channels_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_channels_v1_channels_proto_rawDesc), len(file_channels_v1_channels_proto_rawDesc)))
-	})
-	return file_channels_v1_channels_proto_rawDescData
-}
-
-var file_channels_v1_channels_proto_msgTypes = make([]protoimpl.MessageInfo, 6)
-var file_channels_v1_channels_proto_goTypes = []any{
-	(*RemoveClientConnectionsReq)(nil),      // 0: channels.v1.RemoveClientConnectionsReq
-	(*RemoveClientConnectionsRes)(nil),      // 1: channels.v1.RemoveClientConnectionsRes
-	(*UnsetParentGroupFromChannelsReq)(nil), // 2: channels.v1.UnsetParentGroupFromChannelsReq
-	(*UnsetParentGroupFromChannelsRes)(nil), // 3: channels.v1.UnsetParentGroupFromChannelsRes
-	(*AuthzReq)(nil),                        // 4: channels.v1.AuthzReq
-	(*AuthzRes)(nil),                        // 5: channels.v1.AuthzRes
-	(*v1.RetrieveEntityReq)(nil),            // 6: common.v1.RetrieveEntityReq
-	(*v1.RetrieveIDByRouteReq)(nil),         // 7: common.v1.RetrieveIDByRouteReq
-	(*v1.RetrieveEntityRes)(nil),            // 8: common.v1.RetrieveEntityRes
-}
-var file_channels_v1_channels_proto_depIdxs = []int32{
-	4, // 0: channels.v1.ChannelsService.Authorize:input_type -> channels.v1.AuthzReq
-	0, // 1: channels.v1.ChannelsService.RemoveClientConnections:input_type -> channels.v1.RemoveClientConnectionsReq
-	2, // 2: channels.v1.ChannelsService.UnsetParentGroupFromChannels:input_type -> channels.v1.UnsetParentGroupFromChannelsReq
-	6, // 3: channels.v1.ChannelsService.RetrieveEntity:input_type -> common.v1.RetrieveEntityReq
-	7, // 4: channels.v1.ChannelsService.RetrieveIDByRoute:input_type -> common.v1.RetrieveIDByRouteReq
-	5, // 5: channels.v1.ChannelsService.Authorize:output_type -> channels.v1.AuthzRes
-	1, // 6: channels.v1.ChannelsService.RemoveClientConnections:output_type -> channels.v1.RemoveClientConnectionsRes
-	3, // 7: channels.v1.ChannelsService.UnsetParentGroupFromChannels:output_type -> channels.v1.UnsetParentGroupFromChannelsRes
-	8, // 8: channels.v1.ChannelsService.RetrieveEntity:output_type -> common.v1.RetrieveEntityRes
-	8, // 9: channels.v1.ChannelsService.RetrieveIDByRoute:output_type -> common.v1.RetrieveEntityRes
-	5, // [5:10] is the sub-list for method output_type
-	0, // [0:5] is the sub-list for method input_type
-	0, // [0:0] is the sub-list for extension type_name
-	0, // [0:0] is the sub-list for extension extendee
-	0, // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_channels_v1_channels_proto_init() }
-func file_channels_v1_channels_proto_init() {
-	if File_channels_v1_channels_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_channels_v1_channels_proto_rawDesc), len(file_channels_v1_channels_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   6,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_channels_v1_channels_proto_goTypes,
-		DependencyIndexes: file_channels_v1_channels_proto_depIdxs,
-		MessageInfos:      file_channels_v1_channels_proto_msgTypes,
-	}.Build()
-	File_channels_v1_channels_proto = out.File
-	file_channels_v1_channels_proto_goTypes = nil
-	file_channels_v1_channels_proto_depIdxs = nil
-}

api/grpc/channels/v1/channels_grpc.pb.go

@@ -1,277 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.0
-// source: channels/v1/channels.proto
-
-package v1
-
-import (
-	context "context"
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	ChannelsService_Authorize_FullMethodName                    = "/channels.v1.ChannelsService/Authorize"
-	ChannelsService_RemoveClientConnections_FullMethodName      = "/channels.v1.ChannelsService/RemoveClientConnections"
-	ChannelsService_UnsetParentGroupFromChannels_FullMethodName = "/channels.v1.ChannelsService/UnsetParentGroupFromChannels"
-	ChannelsService_RetrieveEntity_FullMethodName               = "/channels.v1.ChannelsService/RetrieveEntity"
-	ChannelsService_RetrieveIDByRoute_FullMethodName            = "/channels.v1.ChannelsService/RetrieveIDByRoute"
-)
-
-// ChannelsServiceClient is the client API for ChannelsService service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-type ChannelsServiceClient interface {
-	Authorize(ctx context.Context, in *AuthzReq, opts ...grpc.CallOption) (*AuthzRes, error)
-	RemoveClientConnections(ctx context.Context, in *RemoveClientConnectionsReq, opts ...grpc.CallOption) (*RemoveClientConnectionsRes, error)
-	UnsetParentGroupFromChannels(ctx context.Context, in *UnsetParentGroupFromChannelsReq, opts ...grpc.CallOption) (*UnsetParentGroupFromChannelsRes, error)
-	RetrieveEntity(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error)
-	RetrieveIDByRoute(ctx context.Context, in *v1.RetrieveIDByRouteReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error)
-}
-
-type channelsServiceClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewChannelsServiceClient(cc grpc.ClientConnInterface) ChannelsServiceClient {
-	return &channelsServiceClient{cc}
-}
-
-func (c *channelsServiceClient) Authorize(ctx context.Context, in *AuthzReq, opts ...grpc.CallOption) (*AuthzRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(AuthzRes)
-	err := c.cc.Invoke(ctx, ChannelsService_Authorize_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *channelsServiceClient) RemoveClientConnections(ctx context.Context, in *RemoveClientConnectionsReq, opts ...grpc.CallOption) (*RemoveClientConnectionsRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(RemoveClientConnectionsRes)
-	err := c.cc.Invoke(ctx, ChannelsService_RemoveClientConnections_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *channelsServiceClient) UnsetParentGroupFromChannels(ctx context.Context, in *UnsetParentGroupFromChannelsReq, opts ...grpc.CallOption) (*UnsetParentGroupFromChannelsRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(UnsetParentGroupFromChannelsRes)
-	err := c.cc.Invoke(ctx, ChannelsService_UnsetParentGroupFromChannels_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *channelsServiceClient) RetrieveEntity(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntityRes)
-	err := c.cc.Invoke(ctx, ChannelsService_RetrieveEntity_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *channelsServiceClient) RetrieveIDByRoute(ctx context.Context, in *v1.RetrieveIDByRouteReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntityRes)
-	err := c.cc.Invoke(ctx, ChannelsService_RetrieveIDByRoute_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// ChannelsServiceServer is the server API for ChannelsService service.
-// All implementations must embed UnimplementedChannelsServiceServer
-// for forward compatibility.
-type ChannelsServiceServer interface {
-	Authorize(context.Context, *AuthzReq) (*AuthzRes, error)
-	RemoveClientConnections(context.Context, *RemoveClientConnectionsReq) (*RemoveClientConnectionsRes, error)
-	UnsetParentGroupFromChannels(context.Context, *UnsetParentGroupFromChannelsReq) (*UnsetParentGroupFromChannelsRes, error)
-	RetrieveEntity(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error)
-	RetrieveIDByRoute(context.Context, *v1.RetrieveIDByRouteReq) (*v1.RetrieveEntityRes, error)
-	mustEmbedUnimplementedChannelsServiceServer()
-}
-
-// UnimplementedChannelsServiceServer must be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedChannelsServiceServer struct{}
-
-func (UnimplementedChannelsServiceServer) Authorize(context.Context, *AuthzReq) (*AuthzRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method Authorize not implemented")
-}
-func (UnimplementedChannelsServiceServer) RemoveClientConnections(context.Context, *RemoveClientConnectionsReq) (*RemoveClientConnectionsRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RemoveClientConnections not implemented")
-}
-func (UnimplementedChannelsServiceServer) UnsetParentGroupFromChannels(context.Context, *UnsetParentGroupFromChannelsReq) (*UnsetParentGroupFromChannelsRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method UnsetParentGroupFromChannels not implemented")
-}
-func (UnimplementedChannelsServiceServer) RetrieveEntity(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveEntity not implemented")
-}
-func (UnimplementedChannelsServiceServer) RetrieveIDByRoute(context.Context, *v1.RetrieveIDByRouteReq) (*v1.RetrieveEntityRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveIDByRoute not implemented")
-}
-func (UnimplementedChannelsServiceServer) mustEmbedUnimplementedChannelsServiceServer() {}
-func (UnimplementedChannelsServiceServer) testEmbeddedByValue()                         {}
-
-// UnsafeChannelsServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to ChannelsServiceServer will
-// result in compilation errors.
-type UnsafeChannelsServiceServer interface {
-	mustEmbedUnimplementedChannelsServiceServer()
-}
-
-func RegisterChannelsServiceServer(s grpc.ServiceRegistrar, srv ChannelsServiceServer) {
-	// If the following call pancis, it indicates UnimplementedChannelsServiceServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&ChannelsService_ServiceDesc, srv)
-}
-
-func _ChannelsService_Authorize_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(AuthzReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ChannelsServiceServer).Authorize(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ChannelsService_Authorize_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ChannelsServiceServer).Authorize(ctx, req.(*AuthzReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ChannelsService_RemoveClientConnections_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(RemoveClientConnectionsReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ChannelsServiceServer).RemoveClientConnections(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ChannelsService_RemoveClientConnections_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ChannelsServiceServer).RemoveClientConnections(ctx, req.(*RemoveClientConnectionsReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ChannelsService_UnsetParentGroupFromChannels_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(UnsetParentGroupFromChannelsReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ChannelsServiceServer).UnsetParentGroupFromChannels(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ChannelsService_UnsetParentGroupFromChannels_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ChannelsServiceServer).UnsetParentGroupFromChannels(ctx, req.(*UnsetParentGroupFromChannelsReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ChannelsService_RetrieveEntity_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveEntityReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ChannelsServiceServer).RetrieveEntity(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ChannelsService_RetrieveEntity_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ChannelsServiceServer).RetrieveEntity(ctx, req.(*v1.RetrieveEntityReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ChannelsService_RetrieveIDByRoute_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveIDByRouteReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ChannelsServiceServer).RetrieveIDByRoute(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ChannelsService_RetrieveIDByRoute_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ChannelsServiceServer).RetrieveIDByRoute(ctx, req.(*v1.RetrieveIDByRouteReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// ChannelsService_ServiceDesc is the grpc.ServiceDesc for ChannelsService service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var ChannelsService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "channels.v1.ChannelsService",
-	HandlerType: (*ChannelsServiceServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "Authorize",
-			Handler:    _ChannelsService_Authorize_Handler,
-		},
-		{
-			MethodName: "RemoveClientConnections",
-			Handler:    _ChannelsService_RemoveClientConnections_Handler,
-		},
-		{
-			MethodName: "UnsetParentGroupFromChannels",
-			Handler:    _ChannelsService_UnsetParentGroupFromChannels_Handler,
-		},
-		{
-			MethodName: "RetrieveEntity",
-			Handler:    _ChannelsService_RetrieveEntity_Handler,
-		},
-		{
-			MethodName: "RetrieveIDByRoute",
-			Handler:    _ChannelsService_RetrieveIDByRoute_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "channels/v1/channels.proto",
-}

api/grpc/clients/v1/clients.pb.go

@@ -1,384 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: clients/v1/clients.proto
-
-package v1
-
-import (
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type AuthnReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Token         string                 `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthnReq) Reset() {
-	*x = AuthnReq{}
-	mi := &file_clients_v1_clients_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthnReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthnReq) ProtoMessage() {}
-
-func (x *AuthnReq) ProtoReflect() protoreflect.Message {
-	mi := &file_clients_v1_clients_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthnReq.ProtoReflect.Descriptor instead.
-func (*AuthnReq) Descriptor() ([]byte, []int) {
-	return file_clients_v1_clients_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *AuthnReq) GetToken() string {
-	if x != nil {
-		return x.Token
-	}
-	return ""
-}
-
-type AuthnRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Authenticated bool                   `protobuf:"varint,1,opt,name=authenticated,proto3" json:"authenticated,omitempty"`
-	Id            string                 `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AuthnRes) Reset() {
-	*x = AuthnRes{}
-	mi := &file_clients_v1_clients_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AuthnRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AuthnRes) ProtoMessage() {}
-
-func (x *AuthnRes) ProtoReflect() protoreflect.Message {
-	mi := &file_clients_v1_clients_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AuthnRes.ProtoReflect.Descriptor instead.
-func (*AuthnRes) Descriptor() ([]byte, []int) {
-	return file_clients_v1_clients_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *AuthnRes) GetAuthenticated() bool {
-	if x != nil {
-		return x.Authenticated
-	}
-	return false
-}
-
-func (x *AuthnRes) GetId() string {
-	if x != nil {
-		return x.Id
-	}
-	return ""
-}
-
-type RemoveChannelConnectionsReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	ChannelId     string                 `protobuf:"bytes,1,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RemoveChannelConnectionsReq) Reset() {
-	*x = RemoveChannelConnectionsReq{}
-	mi := &file_clients_v1_clients_proto_msgTypes[2]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RemoveChannelConnectionsReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RemoveChannelConnectionsReq) ProtoMessage() {}
-
-func (x *RemoveChannelConnectionsReq) ProtoReflect() protoreflect.Message {
-	mi := &file_clients_v1_clients_proto_msgTypes[2]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RemoveChannelConnectionsReq.ProtoReflect.Descriptor instead.
-func (*RemoveChannelConnectionsReq) Descriptor() ([]byte, []int) {
-	return file_clients_v1_clients_proto_rawDescGZIP(), []int{2}
-}
-
-func (x *RemoveChannelConnectionsReq) GetChannelId() string {
-	if x != nil {
-		return x.ChannelId
-	}
-	return ""
-}
-
-type RemoveChannelConnectionsRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RemoveChannelConnectionsRes) Reset() {
-	*x = RemoveChannelConnectionsRes{}
-	mi := &file_clients_v1_clients_proto_msgTypes[3]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RemoveChannelConnectionsRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RemoveChannelConnectionsRes) ProtoMessage() {}
-
-func (x *RemoveChannelConnectionsRes) ProtoReflect() protoreflect.Message {
-	mi := &file_clients_v1_clients_proto_msgTypes[3]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RemoveChannelConnectionsRes.ProtoReflect.Descriptor instead.
-func (*RemoveChannelConnectionsRes) Descriptor() ([]byte, []int) {
-	return file_clients_v1_clients_proto_rawDescGZIP(), []int{3}
-}
-
-type UnsetParentGroupFromClientReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	ParentGroupId string                 `protobuf:"bytes,1,opt,name=parent_group_id,json=parentGroupId,proto3" json:"parent_group_id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *UnsetParentGroupFromClientReq) Reset() {
-	*x = UnsetParentGroupFromClientReq{}
-	mi := &file_clients_v1_clients_proto_msgTypes[4]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *UnsetParentGroupFromClientReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*UnsetParentGroupFromClientReq) ProtoMessage() {}
-
-func (x *UnsetParentGroupFromClientReq) ProtoReflect() protoreflect.Message {
-	mi := &file_clients_v1_clients_proto_msgTypes[4]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use UnsetParentGroupFromClientReq.ProtoReflect.Descriptor instead.
-func (*UnsetParentGroupFromClientReq) Descriptor() ([]byte, []int) {
-	return file_clients_v1_clients_proto_rawDescGZIP(), []int{4}
-}
-
-func (x *UnsetParentGroupFromClientReq) GetParentGroupId() string {
-	if x != nil {
-		return x.ParentGroupId
-	}
-	return ""
-}
-
-type UnsetParentGroupFromClientRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *UnsetParentGroupFromClientRes) Reset() {
-	*x = UnsetParentGroupFromClientRes{}
-	mi := &file_clients_v1_clients_proto_msgTypes[5]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *UnsetParentGroupFromClientRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*UnsetParentGroupFromClientRes) ProtoMessage() {}
-
-func (x *UnsetParentGroupFromClientRes) ProtoReflect() protoreflect.Message {
-	mi := &file_clients_v1_clients_proto_msgTypes[5]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use UnsetParentGroupFromClientRes.ProtoReflect.Descriptor instead.
-func (*UnsetParentGroupFromClientRes) Descriptor() ([]byte, []int) {
-	return file_clients_v1_clients_proto_rawDescGZIP(), []int{5}
-}
-
-var File_clients_v1_clients_proto protoreflect.FileDescriptor
-
-const file_clients_v1_clients_proto_rawDesc = "" +
-	"\n" +
-	"\x18clients/v1/clients.proto\x12\n" +
-	"clients.v1\x1a\x16common/v1/common.proto\" \n" +
-	"\bAuthnReq\x12\x14\n" +
-	"\x05token\x18\x01 \x01(\tR\x05token\"@\n" +
-	"\bAuthnRes\x12$\n" +
-	"\rauthenticated\x18\x01 \x01(\bR\rauthenticated\x12\x0e\n" +
-	"\x02id\x18\x02 \x01(\tR\x02id\"<\n" +
-	"\x1bRemoveChannelConnectionsReq\x12\x1d\n" +
-	"\n" +
-	"channel_id\x18\x01 \x01(\tR\tchannelId\"\x1d\n" +
-	"\x1bRemoveChannelConnectionsRes\"G\n" +
-	"\x1dUnsetParentGroupFromClientReq\x12&\n" +
-	"\x0fparent_group_id\x18\x01 \x01(\tR\rparentGroupId\"\x1f\n" +
-	"\x1dUnsetParentGroupFromClientRes2\x83\x05\n" +
-	"\x0eClientsService\x12<\n" +
-	"\fAuthenticate\x12\x14.clients.v1.AuthnReq\x1a\x14.clients.v1.AuthnRes\"\x00\x12N\n" +
-	"\x0eRetrieveEntity\x12\x1c.common.v1.RetrieveEntityReq\x1a\x1c.common.v1.RetrieveEntityRes\"\x00\x12T\n" +
-	"\x10RetrieveEntities\x12\x1e.common.v1.RetrieveEntitiesReq\x1a\x1e.common.v1.RetrieveEntitiesRes\"\x00\x12N\n" +
-	"\x0eAddConnections\x12\x1c.common.v1.AddConnectionsReq\x1a\x1c.common.v1.AddConnectionsRes\"\x00\x12W\n" +
-	"\x11RemoveConnections\x12\x1f.common.v1.RemoveConnectionsReq\x1a\x1f.common.v1.RemoveConnectionsRes\"\x00\x12n\n" +
-	"\x18RemoveChannelConnections\x12'.clients.v1.RemoveChannelConnectionsReq\x1a'.clients.v1.RemoveChannelConnectionsRes\"\x00\x12t\n" +
-	"\x1aUnsetParentGroupFromClient\x12).clients.v1.UnsetParentGroupFromClientReq\x1a).clients.v1.UnsetParentGroupFromClientRes\"\x00B0Z.github.com/absmach/supermq/api/grpc/clients/v1b\x06proto3"
-
-var (
-	file_clients_v1_clients_proto_rawDescOnce sync.Once
-	file_clients_v1_clients_proto_rawDescData []byte
-)
-
-func file_clients_v1_clients_proto_rawDescGZIP() []byte {
-	file_clients_v1_clients_proto_rawDescOnce.Do(func() {
-		file_clients_v1_clients_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_clients_v1_clients_proto_rawDesc), len(file_clients_v1_clients_proto_rawDesc)))
-	})
-	return file_clients_v1_clients_proto_rawDescData
-}
-
-var file_clients_v1_clients_proto_msgTypes = make([]protoimpl.MessageInfo, 6)
-var file_clients_v1_clients_proto_goTypes = []any{
-	(*AuthnReq)(nil),                      // 0: clients.v1.AuthnReq
-	(*AuthnRes)(nil),                      // 1: clients.v1.AuthnRes
-	(*RemoveChannelConnectionsReq)(nil),   // 2: clients.v1.RemoveChannelConnectionsReq
-	(*RemoveChannelConnectionsRes)(nil),   // 3: clients.v1.RemoveChannelConnectionsRes
-	(*UnsetParentGroupFromClientReq)(nil), // 4: clients.v1.UnsetParentGroupFromClientReq
-	(*UnsetParentGroupFromClientRes)(nil), // 5: clients.v1.UnsetParentGroupFromClientRes
-	(*v1.RetrieveEntityReq)(nil),          // 6: common.v1.RetrieveEntityReq
-	(*v1.RetrieveEntitiesReq)(nil),        // 7: common.v1.RetrieveEntitiesReq
-	(*v1.AddConnectionsReq)(nil),          // 8: common.v1.AddConnectionsReq
-	(*v1.RemoveConnectionsReq)(nil),       // 9: common.v1.RemoveConnectionsReq
-	(*v1.RetrieveEntityRes)(nil),          // 10: common.v1.RetrieveEntityRes
-	(*v1.RetrieveEntitiesRes)(nil),        // 11: common.v1.RetrieveEntitiesRes
-	(*v1.AddConnectionsRes)(nil),          // 12: common.v1.AddConnectionsRes
-	(*v1.RemoveConnectionsRes)(nil),       // 13: common.v1.RemoveConnectionsRes
-}
-var file_clients_v1_clients_proto_depIdxs = []int32{
-	0,  // 0: clients.v1.ClientsService.Authenticate:input_type -> clients.v1.AuthnReq
-	6,  // 1: clients.v1.ClientsService.RetrieveEntity:input_type -> common.v1.RetrieveEntityReq
-	7,  // 2: clients.v1.ClientsService.RetrieveEntities:input_type -> common.v1.RetrieveEntitiesReq
-	8,  // 3: clients.v1.ClientsService.AddConnections:input_type -> common.v1.AddConnectionsReq
-	9,  // 4: clients.v1.ClientsService.RemoveConnections:input_type -> common.v1.RemoveConnectionsReq
-	2,  // 5: clients.v1.ClientsService.RemoveChannelConnections:input_type -> clients.v1.RemoveChannelConnectionsReq
-	4,  // 6: clients.v1.ClientsService.UnsetParentGroupFromClient:input_type -> clients.v1.UnsetParentGroupFromClientReq
-	1,  // 7: clients.v1.ClientsService.Authenticate:output_type -> clients.v1.AuthnRes
-	10, // 8: clients.v1.ClientsService.RetrieveEntity:output_type -> common.v1.RetrieveEntityRes
-	11, // 9: clients.v1.ClientsService.RetrieveEntities:output_type -> common.v1.RetrieveEntitiesRes
-	12, // 10: clients.v1.ClientsService.AddConnections:output_type -> common.v1.AddConnectionsRes
-	13, // 11: clients.v1.ClientsService.RemoveConnections:output_type -> common.v1.RemoveConnectionsRes
-	3,  // 12: clients.v1.ClientsService.RemoveChannelConnections:output_type -> clients.v1.RemoveChannelConnectionsRes
-	5,  // 13: clients.v1.ClientsService.UnsetParentGroupFromClient:output_type -> clients.v1.UnsetParentGroupFromClientRes
-	7,  // [7:14] is the sub-list for method output_type
-	0,  // [0:7] is the sub-list for method input_type
-	0,  // [0:0] is the sub-list for extension type_name
-	0,  // [0:0] is the sub-list for extension extendee
-	0,  // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_clients_v1_clients_proto_init() }
-func file_clients_v1_clients_proto_init() {
-	if File_clients_v1_clients_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_clients_v1_clients_proto_rawDesc), len(file_clients_v1_clients_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   6,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_clients_v1_clients_proto_goTypes,
-		DependencyIndexes: file_clients_v1_clients_proto_depIdxs,
-		MessageInfos:      file_clients_v1_clients_proto_msgTypes,
-	}.Build()
-	File_clients_v1_clients_proto = out.File
-	file_clients_v1_clients_proto_goTypes = nil
-	file_clients_v1_clients_proto_depIdxs = nil
-}

api/grpc/clients/v1/clients_grpc.pb.go

@@ -1,361 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.0
-// source: clients/v1/clients.proto
-
-package v1
-
-import (
-	context "context"
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	ClientsService_Authenticate_FullMethodName               = "/clients.v1.ClientsService/Authenticate"
-	ClientsService_RetrieveEntity_FullMethodName             = "/clients.v1.ClientsService/RetrieveEntity"
-	ClientsService_RetrieveEntities_FullMethodName           = "/clients.v1.ClientsService/RetrieveEntities"
-	ClientsService_AddConnections_FullMethodName             = "/clients.v1.ClientsService/AddConnections"
-	ClientsService_RemoveConnections_FullMethodName          = "/clients.v1.ClientsService/RemoveConnections"
-	ClientsService_RemoveChannelConnections_FullMethodName   = "/clients.v1.ClientsService/RemoveChannelConnections"
-	ClientsService_UnsetParentGroupFromClient_FullMethodName = "/clients.v1.ClientsService/UnsetParentGroupFromClient"
-)
-
-// ClientsServiceClient is the client API for ClientsService service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// ClientsService is a service that provides clients
-// authorization functionalities for SuperMQ services.
-type ClientsServiceClient interface {
-	// Authorize checks if the client is authorized to perform
-	Authenticate(ctx context.Context, in *AuthnReq, opts ...grpc.CallOption) (*AuthnRes, error)
-	RetrieveEntity(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error)
-	RetrieveEntities(ctx context.Context, in *v1.RetrieveEntitiesReq, opts ...grpc.CallOption) (*v1.RetrieveEntitiesRes, error)
-	AddConnections(ctx context.Context, in *v1.AddConnectionsReq, opts ...grpc.CallOption) (*v1.AddConnectionsRes, error)
-	RemoveConnections(ctx context.Context, in *v1.RemoveConnectionsReq, opts ...grpc.CallOption) (*v1.RemoveConnectionsRes, error)
-	RemoveChannelConnections(ctx context.Context, in *RemoveChannelConnectionsReq, opts ...grpc.CallOption) (*RemoveChannelConnectionsRes, error)
-	UnsetParentGroupFromClient(ctx context.Context, in *UnsetParentGroupFromClientReq, opts ...grpc.CallOption) (*UnsetParentGroupFromClientRes, error)
-}
-
-type clientsServiceClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewClientsServiceClient(cc grpc.ClientConnInterface) ClientsServiceClient {
-	return &clientsServiceClient{cc}
-}
-
-func (c *clientsServiceClient) Authenticate(ctx context.Context, in *AuthnReq, opts ...grpc.CallOption) (*AuthnRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(AuthnRes)
-	err := c.cc.Invoke(ctx, ClientsService_Authenticate_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *clientsServiceClient) RetrieveEntity(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntityRes)
-	err := c.cc.Invoke(ctx, ClientsService_RetrieveEntity_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *clientsServiceClient) RetrieveEntities(ctx context.Context, in *v1.RetrieveEntitiesReq, opts ...grpc.CallOption) (*v1.RetrieveEntitiesRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntitiesRes)
-	err := c.cc.Invoke(ctx, ClientsService_RetrieveEntities_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *clientsServiceClient) AddConnections(ctx context.Context, in *v1.AddConnectionsReq, opts ...grpc.CallOption) (*v1.AddConnectionsRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.AddConnectionsRes)
-	err := c.cc.Invoke(ctx, ClientsService_AddConnections_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *clientsServiceClient) RemoveConnections(ctx context.Context, in *v1.RemoveConnectionsReq, opts ...grpc.CallOption) (*v1.RemoveConnectionsRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RemoveConnectionsRes)
-	err := c.cc.Invoke(ctx, ClientsService_RemoveConnections_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *clientsServiceClient) RemoveChannelConnections(ctx context.Context, in *RemoveChannelConnectionsReq, opts ...grpc.CallOption) (*RemoveChannelConnectionsRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(RemoveChannelConnectionsRes)
-	err := c.cc.Invoke(ctx, ClientsService_RemoveChannelConnections_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *clientsServiceClient) UnsetParentGroupFromClient(ctx context.Context, in *UnsetParentGroupFromClientReq, opts ...grpc.CallOption) (*UnsetParentGroupFromClientRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(UnsetParentGroupFromClientRes)
-	err := c.cc.Invoke(ctx, ClientsService_UnsetParentGroupFromClient_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// ClientsServiceServer is the server API for ClientsService service.
-// All implementations must embed UnimplementedClientsServiceServer
-// for forward compatibility.
-//
-// ClientsService is a service that provides clients
-// authorization functionalities for SuperMQ services.
-type ClientsServiceServer interface {
-	// Authorize checks if the client is authorized to perform
-	Authenticate(context.Context, *AuthnReq) (*AuthnRes, error)
-	RetrieveEntity(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error)
-	RetrieveEntities(context.Context, *v1.RetrieveEntitiesReq) (*v1.RetrieveEntitiesRes, error)
-	AddConnections(context.Context, *v1.AddConnectionsReq) (*v1.AddConnectionsRes, error)
-	RemoveConnections(context.Context, *v1.RemoveConnectionsReq) (*v1.RemoveConnectionsRes, error)
-	RemoveChannelConnections(context.Context, *RemoveChannelConnectionsReq) (*RemoveChannelConnectionsRes, error)
-	UnsetParentGroupFromClient(context.Context, *UnsetParentGroupFromClientReq) (*UnsetParentGroupFromClientRes, error)
-	mustEmbedUnimplementedClientsServiceServer()
-}
-
-// UnimplementedClientsServiceServer must be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedClientsServiceServer struct{}
-
-func (UnimplementedClientsServiceServer) Authenticate(context.Context, *AuthnReq) (*AuthnRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method Authenticate not implemented")
-}
-func (UnimplementedClientsServiceServer) RetrieveEntity(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveEntity not implemented")
-}
-func (UnimplementedClientsServiceServer) RetrieveEntities(context.Context, *v1.RetrieveEntitiesReq) (*v1.RetrieveEntitiesRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveEntities not implemented")
-}
-func (UnimplementedClientsServiceServer) AddConnections(context.Context, *v1.AddConnectionsReq) (*v1.AddConnectionsRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method AddConnections not implemented")
-}
-func (UnimplementedClientsServiceServer) RemoveConnections(context.Context, *v1.RemoveConnectionsReq) (*v1.RemoveConnectionsRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RemoveConnections not implemented")
-}
-func (UnimplementedClientsServiceServer) RemoveChannelConnections(context.Context, *RemoveChannelConnectionsReq) (*RemoveChannelConnectionsRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RemoveChannelConnections not implemented")
-}
-func (UnimplementedClientsServiceServer) UnsetParentGroupFromClient(context.Context, *UnsetParentGroupFromClientReq) (*UnsetParentGroupFromClientRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method UnsetParentGroupFromClient not implemented")
-}
-func (UnimplementedClientsServiceServer) mustEmbedUnimplementedClientsServiceServer() {}
-func (UnimplementedClientsServiceServer) testEmbeddedByValue()                        {}
-
-// UnsafeClientsServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to ClientsServiceServer will
-// result in compilation errors.
-type UnsafeClientsServiceServer interface {
-	mustEmbedUnimplementedClientsServiceServer()
-}
-
-func RegisterClientsServiceServer(s grpc.ServiceRegistrar, srv ClientsServiceServer) {
-	// If the following call pancis, it indicates UnimplementedClientsServiceServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&ClientsService_ServiceDesc, srv)
-}
-
-func _ClientsService_Authenticate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(AuthnReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).Authenticate(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_Authenticate_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).Authenticate(ctx, req.(*AuthnReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ClientsService_RetrieveEntity_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveEntityReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).RetrieveEntity(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_RetrieveEntity_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).RetrieveEntity(ctx, req.(*v1.RetrieveEntityReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ClientsService_RetrieveEntities_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveEntitiesReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).RetrieveEntities(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_RetrieveEntities_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).RetrieveEntities(ctx, req.(*v1.RetrieveEntitiesReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ClientsService_AddConnections_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.AddConnectionsReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).AddConnections(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_AddConnections_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).AddConnections(ctx, req.(*v1.AddConnectionsReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ClientsService_RemoveConnections_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RemoveConnectionsReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).RemoveConnections(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_RemoveConnections_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).RemoveConnections(ctx, req.(*v1.RemoveConnectionsReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ClientsService_RemoveChannelConnections_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(RemoveChannelConnectionsReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).RemoveChannelConnections(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_RemoveChannelConnections_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).RemoveChannelConnections(ctx, req.(*RemoveChannelConnectionsReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _ClientsService_UnsetParentGroupFromClient_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(UnsetParentGroupFromClientReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(ClientsServiceServer).UnsetParentGroupFromClient(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: ClientsService_UnsetParentGroupFromClient_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(ClientsServiceServer).UnsetParentGroupFromClient(ctx, req.(*UnsetParentGroupFromClientReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// ClientsService_ServiceDesc is the grpc.ServiceDesc for ClientsService service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var ClientsService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "clients.v1.ClientsService",
-	HandlerType: (*ClientsServiceServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "Authenticate",
-			Handler:    _ClientsService_Authenticate_Handler,
-		},
-		{
-			MethodName: "RetrieveEntity",
-			Handler:    _ClientsService_RetrieveEntity_Handler,
-		},
-		{
-			MethodName: "RetrieveEntities",
-			Handler:    _ClientsService_RetrieveEntities_Handler,
-		},
-		{
-			MethodName: "AddConnections",
-			Handler:    _ClientsService_AddConnections_Handler,
-		},
-		{
-			MethodName: "RemoveConnections",
-			Handler:    _ClientsService_RemoveConnections_Handler,
-		},
-		{
-			MethodName: "RemoveChannelConnections",
-			Handler:    _ClientsService_RemoveChannelConnections_Handler,
-		},
-		{
-			MethodName: "UnsetParentGroupFromClient",
-			Handler:    _ClientsService_UnsetParentGroupFromClient_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "clients/v1/clients.proto",
-}

api/grpc/common/v1/common.pb.go

@@ -1,691 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: common/v1/common.proto
-
-package v1
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type RetrieveEntitiesReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Ids           []string               `protobuf:"bytes,1,rep,name=ids,proto3" json:"ids,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RetrieveEntitiesReq) Reset() {
-	*x = RetrieveEntitiesReq{}
-	mi := &file_common_v1_common_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RetrieveEntitiesReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RetrieveEntitiesReq) ProtoMessage() {}
-
-func (x *RetrieveEntitiesReq) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RetrieveEntitiesReq.ProtoReflect.Descriptor instead.
-func (*RetrieveEntitiesReq) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *RetrieveEntitiesReq) GetIds() []string {
-	if x != nil {
-		return x.Ids
-	}
-	return nil
-}
-
-type RetrieveEntitiesRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Total         uint64                 `protobuf:"varint,1,opt,name=total,proto3" json:"total,omitempty"`
-	Limit         uint64                 `protobuf:"varint,2,opt,name=limit,proto3" json:"limit,omitempty"`
-	Offset        uint64                 `protobuf:"varint,3,opt,name=offset,proto3" json:"offset,omitempty"`
-	Entities      []*EntityBasic         `protobuf:"bytes,4,rep,name=entities,proto3" json:"entities,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RetrieveEntitiesRes) Reset() {
-	*x = RetrieveEntitiesRes{}
-	mi := &file_common_v1_common_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RetrieveEntitiesRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RetrieveEntitiesRes) ProtoMessage() {}
-
-func (x *RetrieveEntitiesRes) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RetrieveEntitiesRes.ProtoReflect.Descriptor instead.
-func (*RetrieveEntitiesRes) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *RetrieveEntitiesRes) GetTotal() uint64 {
-	if x != nil {
-		return x.Total
-	}
-	return 0
-}
-
-func (x *RetrieveEntitiesRes) GetLimit() uint64 {
-	if x != nil {
-		return x.Limit
-	}
-	return 0
-}
-
-func (x *RetrieveEntitiesRes) GetOffset() uint64 {
-	if x != nil {
-		return x.Offset
-	}
-	return 0
-}
-
-func (x *RetrieveEntitiesRes) GetEntities() []*EntityBasic {
-	if x != nil {
-		return x.Entities
-	}
-	return nil
-}
-
-type RetrieveEntityReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RetrieveEntityReq) Reset() {
-	*x = RetrieveEntityReq{}
-	mi := &file_common_v1_common_proto_msgTypes[2]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RetrieveEntityReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RetrieveEntityReq) ProtoMessage() {}
-
-func (x *RetrieveEntityReq) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[2]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RetrieveEntityReq.ProtoReflect.Descriptor instead.
-func (*RetrieveEntityReq) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{2}
-}
-
-func (x *RetrieveEntityReq) GetId() string {
-	if x != nil {
-		return x.Id
-	}
-	return ""
-}
-
-type RetrieveEntityRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Entity        *EntityBasic           `protobuf:"bytes,1,opt,name=entity,proto3" json:"entity,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RetrieveEntityRes) Reset() {
-	*x = RetrieveEntityRes{}
-	mi := &file_common_v1_common_proto_msgTypes[3]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RetrieveEntityRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RetrieveEntityRes) ProtoMessage() {}
-
-func (x *RetrieveEntityRes) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[3]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RetrieveEntityRes.ProtoReflect.Descriptor instead.
-func (*RetrieveEntityRes) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{3}
-}
-
-func (x *RetrieveEntityRes) GetEntity() *EntityBasic {
-	if x != nil {
-		return x.Entity
-	}
-	return nil
-}
-
-type EntityBasic struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	DomainId      string                 `protobuf:"bytes,2,opt,name=domain_id,json=domainId,proto3" json:"domain_id,omitempty"`
-	ParentGroupId string                 `protobuf:"bytes,3,opt,name=parent_group_id,json=parentGroupId,proto3" json:"parent_group_id,omitempty"`
-	Status        uint32                 `protobuf:"varint,4,opt,name=status,proto3" json:"status,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *EntityBasic) Reset() {
-	*x = EntityBasic{}
-	mi := &file_common_v1_common_proto_msgTypes[4]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *EntityBasic) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*EntityBasic) ProtoMessage() {}
-
-func (x *EntityBasic) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[4]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use EntityBasic.ProtoReflect.Descriptor instead.
-func (*EntityBasic) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{4}
-}
-
-func (x *EntityBasic) GetId() string {
-	if x != nil {
-		return x.Id
-	}
-	return ""
-}
-
-func (x *EntityBasic) GetDomainId() string {
-	if x != nil {
-		return x.DomainId
-	}
-	return ""
-}
-
-func (x *EntityBasic) GetParentGroupId() string {
-	if x != nil {
-		return x.ParentGroupId
-	}
-	return ""
-}
-
-func (x *EntityBasic) GetStatus() uint32 {
-	if x != nil {
-		return x.Status
-	}
-	return 0
-}
-
-type AddConnectionsReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Connections   []*Connection          `protobuf:"bytes,1,rep,name=connections,proto3" json:"connections,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AddConnectionsReq) Reset() {
-	*x = AddConnectionsReq{}
-	mi := &file_common_v1_common_proto_msgTypes[5]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AddConnectionsReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AddConnectionsReq) ProtoMessage() {}
-
-func (x *AddConnectionsReq) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[5]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AddConnectionsReq.ProtoReflect.Descriptor instead.
-func (*AddConnectionsReq) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{5}
-}
-
-func (x *AddConnectionsReq) GetConnections() []*Connection {
-	if x != nil {
-		return x.Connections
-	}
-	return nil
-}
-
-type AddConnectionsRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Ok            bool                   `protobuf:"varint,1,opt,name=ok,proto3" json:"ok,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *AddConnectionsRes) Reset() {
-	*x = AddConnectionsRes{}
-	mi := &file_common_v1_common_proto_msgTypes[6]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *AddConnectionsRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*AddConnectionsRes) ProtoMessage() {}
-
-func (x *AddConnectionsRes) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[6]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use AddConnectionsRes.ProtoReflect.Descriptor instead.
-func (*AddConnectionsRes) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{6}
-}
-
-func (x *AddConnectionsRes) GetOk() bool {
-	if x != nil {
-		return x.Ok
-	}
-	return false
-}
-
-type RemoveConnectionsReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Connections   []*Connection          `protobuf:"bytes,1,rep,name=connections,proto3" json:"connections,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RemoveConnectionsReq) Reset() {
-	*x = RemoveConnectionsReq{}
-	mi := &file_common_v1_common_proto_msgTypes[7]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RemoveConnectionsReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RemoveConnectionsReq) ProtoMessage() {}
-
-func (x *RemoveConnectionsReq) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[7]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RemoveConnectionsReq.ProtoReflect.Descriptor instead.
-func (*RemoveConnectionsReq) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{7}
-}
-
-func (x *RemoveConnectionsReq) GetConnections() []*Connection {
-	if x != nil {
-		return x.Connections
-	}
-	return nil
-}
-
-type RemoveConnectionsRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Ok            bool                   `protobuf:"varint,1,opt,name=ok,proto3" json:"ok,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RemoveConnectionsRes) Reset() {
-	*x = RemoveConnectionsRes{}
-	mi := &file_common_v1_common_proto_msgTypes[8]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RemoveConnectionsRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RemoveConnectionsRes) ProtoMessage() {}
-
-func (x *RemoveConnectionsRes) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[8]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RemoveConnectionsRes.ProtoReflect.Descriptor instead.
-func (*RemoveConnectionsRes) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{8}
-}
-
-func (x *RemoveConnectionsRes) GetOk() bool {
-	if x != nil {
-		return x.Ok
-	}
-	return false
-}
-
-type Connection struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	ClientId      string                 `protobuf:"bytes,1,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
-	ChannelId     string                 `protobuf:"bytes,2,opt,name=channel_id,json=channelId,proto3" json:"channel_id,omitempty"`
-	DomainId      string                 `protobuf:"bytes,3,opt,name=domain_id,json=domainId,proto3" json:"domain_id,omitempty"`
-	Type          uint32                 `protobuf:"varint,4,opt,name=type,proto3" json:"type,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *Connection) Reset() {
-	*x = Connection{}
-	mi := &file_common_v1_common_proto_msgTypes[9]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *Connection) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*Connection) ProtoMessage() {}
-
-func (x *Connection) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[9]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use Connection.ProtoReflect.Descriptor instead.
-func (*Connection) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{9}
-}
-
-func (x *Connection) GetClientId() string {
-	if x != nil {
-		return x.ClientId
-	}
-	return ""
-}
-
-func (x *Connection) GetChannelId() string {
-	if x != nil {
-		return x.ChannelId
-	}
-	return ""
-}
-
-func (x *Connection) GetDomainId() string {
-	if x != nil {
-		return x.DomainId
-	}
-	return ""
-}
-
-func (x *Connection) GetType() uint32 {
-	if x != nil {
-		return x.Type
-	}
-	return 0
-}
-
-type RetrieveIDByRouteReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Route         string                 `protobuf:"bytes,1,opt,name=route,proto3" json:"route,omitempty"`
-	DomainId      string                 `protobuf:"bytes,2,opt,name=domain_id,json=domainId,proto3" json:"domain_id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RetrieveIDByRouteReq) Reset() {
-	*x = RetrieveIDByRouteReq{}
-	mi := &file_common_v1_common_proto_msgTypes[10]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RetrieveIDByRouteReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RetrieveIDByRouteReq) ProtoMessage() {}
-
-func (x *RetrieveIDByRouteReq) ProtoReflect() protoreflect.Message {
-	mi := &file_common_v1_common_proto_msgTypes[10]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RetrieveIDByRouteReq.ProtoReflect.Descriptor instead.
-func (*RetrieveIDByRouteReq) Descriptor() ([]byte, []int) {
-	return file_common_v1_common_proto_rawDescGZIP(), []int{10}
-}
-
-func (x *RetrieveIDByRouteReq) GetRoute() string {
-	if x != nil {
-		return x.Route
-	}
-	return ""
-}
-
-func (x *RetrieveIDByRouteReq) GetDomainId() string {
-	if x != nil {
-		return x.DomainId
-	}
-	return ""
-}
-
-var File_common_v1_common_proto protoreflect.FileDescriptor
-
-const file_common_v1_common_proto_rawDesc = "" +
-	"\n" +
-	"\x16common/v1/common.proto\x12\tcommon.v1\"'\n" +
-	"\x13RetrieveEntitiesReq\x12\x10\n" +
-	"\x03ids\x18\x01 \x03(\tR\x03ids\"\x8d\x01\n" +
-	"\x13RetrieveEntitiesRes\x12\x14\n" +
-	"\x05total\x18\x01 \x01(\x04R\x05total\x12\x14\n" +
-	"\x05limit\x18\x02 \x01(\x04R\x05limit\x12\x16\n" +
-	"\x06offset\x18\x03 \x01(\x04R\x06offset\x122\n" +
-	"\bentities\x18\x04 \x03(\v2\x16.common.v1.EntityBasicR\bentities\"#\n" +
-	"\x11RetrieveEntityReq\x12\x0e\n" +
-	"\x02id\x18\x01 \x01(\tR\x02id\"C\n" +
-	"\x11RetrieveEntityRes\x12.\n" +
-	"\x06entity\x18\x01 \x01(\v2\x16.common.v1.EntityBasicR\x06entity\"z\n" +
-	"\vEntityBasic\x12\x0e\n" +
-	"\x02id\x18\x01 \x01(\tR\x02id\x12\x1b\n" +
-	"\tdomain_id\x18\x02 \x01(\tR\bdomainId\x12&\n" +
-	"\x0fparent_group_id\x18\x03 \x01(\tR\rparentGroupId\x12\x16\n" +
-	"\x06status\x18\x04 \x01(\rR\x06status\"L\n" +
-	"\x11AddConnectionsReq\x127\n" +
-	"\vconnections\x18\x01 \x03(\v2\x15.common.v1.ConnectionR\vconnections\"#\n" +
-	"\x11AddConnectionsRes\x12\x0e\n" +
-	"\x02ok\x18\x01 \x01(\bR\x02ok\"O\n" +
-	"\x14RemoveConnectionsReq\x127\n" +
-	"\vconnections\x18\x01 \x03(\v2\x15.common.v1.ConnectionR\vconnections\"&\n" +
-	"\x14RemoveConnectionsRes\x12\x0e\n" +
-	"\x02ok\x18\x01 \x01(\bR\x02ok\"y\n" +
-	"\n" +
-	"Connection\x12\x1b\n" +
-	"\tclient_id\x18\x01 \x01(\tR\bclientId\x12\x1d\n" +
-	"\n" +
-	"channel_id\x18\x02 \x01(\tR\tchannelId\x12\x1b\n" +
-	"\tdomain_id\x18\x03 \x01(\tR\bdomainId\x12\x12\n" +
-	"\x04type\x18\x04 \x01(\rR\x04type\"I\n" +
-	"\x14RetrieveIDByRouteReq\x12\x14\n" +
-	"\x05route\x18\x01 \x01(\tR\x05route\x12\x1b\n" +
-	"\tdomain_id\x18\x02 \x01(\tR\bdomainIdB/Z-github.com/absmach/supermq/api/grpc/common/v1b\x06proto3"
-
-var (
-	file_common_v1_common_proto_rawDescOnce sync.Once
-	file_common_v1_common_proto_rawDescData []byte
-)
-
-func file_common_v1_common_proto_rawDescGZIP() []byte {
-	file_common_v1_common_proto_rawDescOnce.Do(func() {
-		file_common_v1_common_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_common_v1_common_proto_rawDesc), len(file_common_v1_common_proto_rawDesc)))
-	})
-	return file_common_v1_common_proto_rawDescData
-}
-
-var file_common_v1_common_proto_msgTypes = make([]protoimpl.MessageInfo, 11)
-var file_common_v1_common_proto_goTypes = []any{
-	(*RetrieveEntitiesReq)(nil),  // 0: common.v1.RetrieveEntitiesReq
-	(*RetrieveEntitiesRes)(nil),  // 1: common.v1.RetrieveEntitiesRes
-	(*RetrieveEntityReq)(nil),    // 2: common.v1.RetrieveEntityReq
-	(*RetrieveEntityRes)(nil),    // 3: common.v1.RetrieveEntityRes
-	(*EntityBasic)(nil),          // 4: common.v1.EntityBasic
-	(*AddConnectionsReq)(nil),    // 5: common.v1.AddConnectionsReq
-	(*AddConnectionsRes)(nil),    // 6: common.v1.AddConnectionsRes
-	(*RemoveConnectionsReq)(nil), // 7: common.v1.RemoveConnectionsReq
-	(*RemoveConnectionsRes)(nil), // 8: common.v1.RemoveConnectionsRes
-	(*Connection)(nil),           // 9: common.v1.Connection
-	(*RetrieveIDByRouteReq)(nil), // 10: common.v1.RetrieveIDByRouteReq
-}
-var file_common_v1_common_proto_depIdxs = []int32{
-	4, // 0: common.v1.RetrieveEntitiesRes.entities:type_name -> common.v1.EntityBasic
-	4, // 1: common.v1.RetrieveEntityRes.entity:type_name -> common.v1.EntityBasic
-	9, // 2: common.v1.AddConnectionsReq.connections:type_name -> common.v1.Connection
-	9, // 3: common.v1.RemoveConnectionsReq.connections:type_name -> common.v1.Connection
-	4, // [4:4] is the sub-list for method output_type
-	4, // [4:4] is the sub-list for method input_type
-	4, // [4:4] is the sub-list for extension type_name
-	4, // [4:4] is the sub-list for extension extendee
-	0, // [0:4] is the sub-list for field type_name
-}
-
-func init() { file_common_v1_common_proto_init() }
-func file_common_v1_common_proto_init() {
-	if File_common_v1_common_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_common_v1_common_proto_rawDesc), len(file_common_v1_common_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   11,
-			NumExtensions: 0,
-			NumServices:   0,
-		},
-		GoTypes:           file_common_v1_common_proto_goTypes,
-		DependencyIndexes: file_common_v1_common_proto_depIdxs,
-		MessageInfos:      file_common_v1_common_proto_msgTypes,
-	}.Build()
-	File_common_v1_common_proto = out.File
-	file_common_v1_common_proto_goTypes = nil
-	file_common_v1_common_proto_depIdxs = nil
-}

api/grpc/domains/v1/domains.pb.go

@@ -1,187 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: domains/v1/domains.proto
-
-package v1
-
-import (
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type DeleteUserRes struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Deleted       bool                   `protobuf:"varint,1,opt,name=deleted,proto3" json:"deleted,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *DeleteUserRes) Reset() {
-	*x = DeleteUserRes{}
-	mi := &file_domains_v1_domains_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *DeleteUserRes) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*DeleteUserRes) ProtoMessage() {}
-
-func (x *DeleteUserRes) ProtoReflect() protoreflect.Message {
-	mi := &file_domains_v1_domains_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use DeleteUserRes.ProtoReflect.Descriptor instead.
-func (*DeleteUserRes) Descriptor() ([]byte, []int) {
-	return file_domains_v1_domains_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *DeleteUserRes) GetDeleted() bool {
-	if x != nil {
-		return x.Deleted
-	}
-	return false
-}
-
-type DeleteUserReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	Id            string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *DeleteUserReq) Reset() {
-	*x = DeleteUserReq{}
-	mi := &file_domains_v1_domains_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *DeleteUserReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*DeleteUserReq) ProtoMessage() {}
-
-func (x *DeleteUserReq) ProtoReflect() protoreflect.Message {
-	mi := &file_domains_v1_domains_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use DeleteUserReq.ProtoReflect.Descriptor instead.
-func (*DeleteUserReq) Descriptor() ([]byte, []int) {
-	return file_domains_v1_domains_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *DeleteUserReq) GetId() string {
-	if x != nil {
-		return x.Id
-	}
-	return ""
-}
-
-var File_domains_v1_domains_proto protoreflect.FileDescriptor
-
-const file_domains_v1_domains_proto_rawDesc = "" +
-	"\n" +
-	"\x18domains/v1/domains.proto\x12\n" +
-	"domains.v1\x1a\x16common/v1/common.proto\")\n" +
-	"\rDeleteUserRes\x12\x18\n" +
-	"\adeleted\x18\x01 \x01(\bR\adeleted\"\x1f\n" +
-	"\rDeleteUserReq\x12\x0e\n" +
-	"\x02id\x18\x01 \x01(\tR\x02id2\x87\x02\n" +
-	"\x0eDomainsService\x12O\n" +
-	"\x15DeleteUserFromDomains\x12\x19.domains.v1.DeleteUserReq\x1a\x19.domains.v1.DeleteUserRes\"\x00\x12N\n" +
-	"\x0eRetrieveStatus\x12\x1c.common.v1.RetrieveEntityReq\x1a\x1c.common.v1.RetrieveEntityRes\"\x00\x12T\n" +
-	"\x11RetrieveIDByRoute\x12\x1f.common.v1.RetrieveIDByRouteReq\x1a\x1c.common.v1.RetrieveEntityRes\"\x00B5Z3github.com/absmach/supermq/internal/grpc/domains/v1b\x06proto3"
-
-var (
-	file_domains_v1_domains_proto_rawDescOnce sync.Once
-	file_domains_v1_domains_proto_rawDescData []byte
-)
-
-func file_domains_v1_domains_proto_rawDescGZIP() []byte {
-	file_domains_v1_domains_proto_rawDescOnce.Do(func() {
-		file_domains_v1_domains_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_domains_v1_domains_proto_rawDesc), len(file_domains_v1_domains_proto_rawDesc)))
-	})
-	return file_domains_v1_domains_proto_rawDescData
-}
-
-var file_domains_v1_domains_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
-var file_domains_v1_domains_proto_goTypes = []any{
-	(*DeleteUserRes)(nil),           // 0: domains.v1.DeleteUserRes
-	(*DeleteUserReq)(nil),           // 1: domains.v1.DeleteUserReq
-	(*v1.RetrieveEntityReq)(nil),    // 2: common.v1.RetrieveEntityReq
-	(*v1.RetrieveIDByRouteReq)(nil), // 3: common.v1.RetrieveIDByRouteReq
-	(*v1.RetrieveEntityRes)(nil),    // 4: common.v1.RetrieveEntityRes
-}
-var file_domains_v1_domains_proto_depIdxs = []int32{
-	1, // 0: domains.v1.DomainsService.DeleteUserFromDomains:input_type -> domains.v1.DeleteUserReq
-	2, // 1: domains.v1.DomainsService.RetrieveStatus:input_type -> common.v1.RetrieveEntityReq
-	3, // 2: domains.v1.DomainsService.RetrieveIDByRoute:input_type -> common.v1.RetrieveIDByRouteReq
-	0, // 3: domains.v1.DomainsService.DeleteUserFromDomains:output_type -> domains.v1.DeleteUserRes
-	4, // 4: domains.v1.DomainsService.RetrieveStatus:output_type -> common.v1.RetrieveEntityRes
-	4, // 5: domains.v1.DomainsService.RetrieveIDByRoute:output_type -> common.v1.RetrieveEntityRes
-	3, // [3:6] is the sub-list for method output_type
-	0, // [0:3] is the sub-list for method input_type
-	0, // [0:0] is the sub-list for extension type_name
-	0, // [0:0] is the sub-list for extension extendee
-	0, // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_domains_v1_domains_proto_init() }
-func file_domains_v1_domains_proto_init() {
-	if File_domains_v1_domains_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_domains_v1_domains_proto_rawDesc), len(file_domains_v1_domains_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   2,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_domains_v1_domains_proto_goTypes,
-		DependencyIndexes: file_domains_v1_domains_proto_depIdxs,
-		MessageInfos:      file_domains_v1_domains_proto_msgTypes,
-	}.Build()
-	File_domains_v1_domains_proto = out.File
-	file_domains_v1_domains_proto_goTypes = nil
-	file_domains_v1_domains_proto_depIdxs = nil
-}

api/grpc/domains/v1/domains_grpc.pb.go

@@ -1,207 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.0
-// source: domains/v1/domains.proto
-
-package v1
-
-import (
-	context "context"
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	DomainsService_DeleteUserFromDomains_FullMethodName = "/domains.v1.DomainsService/DeleteUserFromDomains"
-	DomainsService_RetrieveStatus_FullMethodName        = "/domains.v1.DomainsService/RetrieveStatus"
-	DomainsService_RetrieveIDByRoute_FullMethodName     = "/domains.v1.DomainsService/RetrieveIDByRoute"
-)
-
-// DomainsServiceClient is the client API for DomainsService service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// DomainsService is a service that provides access to
-// domains functionalities for SuperMQ services.
-type DomainsServiceClient interface {
-	DeleteUserFromDomains(ctx context.Context, in *DeleteUserReq, opts ...grpc.CallOption) (*DeleteUserRes, error)
-	RetrieveStatus(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error)
-	RetrieveIDByRoute(ctx context.Context, in *v1.RetrieveIDByRouteReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error)
-}
-
-type domainsServiceClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewDomainsServiceClient(cc grpc.ClientConnInterface) DomainsServiceClient {
-	return &domainsServiceClient{cc}
-}
-
-func (c *domainsServiceClient) DeleteUserFromDomains(ctx context.Context, in *DeleteUserReq, opts ...grpc.CallOption) (*DeleteUserRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(DeleteUserRes)
-	err := c.cc.Invoke(ctx, DomainsService_DeleteUserFromDomains_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *domainsServiceClient) RetrieveStatus(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntityRes)
-	err := c.cc.Invoke(ctx, DomainsService_RetrieveStatus_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *domainsServiceClient) RetrieveIDByRoute(ctx context.Context, in *v1.RetrieveIDByRouteReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntityRes)
-	err := c.cc.Invoke(ctx, DomainsService_RetrieveIDByRoute_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// DomainsServiceServer is the server API for DomainsService service.
-// All implementations must embed UnimplementedDomainsServiceServer
-// for forward compatibility.
-//
-// DomainsService is a service that provides access to
-// domains functionalities for SuperMQ services.
-type DomainsServiceServer interface {
-	DeleteUserFromDomains(context.Context, *DeleteUserReq) (*DeleteUserRes, error)
-	RetrieveStatus(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error)
-	RetrieveIDByRoute(context.Context, *v1.RetrieveIDByRouteReq) (*v1.RetrieveEntityRes, error)
-	mustEmbedUnimplementedDomainsServiceServer()
-}
-
-// UnimplementedDomainsServiceServer must be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedDomainsServiceServer struct{}
-
-func (UnimplementedDomainsServiceServer) DeleteUserFromDomains(context.Context, *DeleteUserReq) (*DeleteUserRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method DeleteUserFromDomains not implemented")
-}
-func (UnimplementedDomainsServiceServer) RetrieveStatus(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveStatus not implemented")
-}
-func (UnimplementedDomainsServiceServer) RetrieveIDByRoute(context.Context, *v1.RetrieveIDByRouteReq) (*v1.RetrieveEntityRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveIDByRoute not implemented")
-}
-func (UnimplementedDomainsServiceServer) mustEmbedUnimplementedDomainsServiceServer() {}
-func (UnimplementedDomainsServiceServer) testEmbeddedByValue()                        {}
-
-// UnsafeDomainsServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to DomainsServiceServer will
-// result in compilation errors.
-type UnsafeDomainsServiceServer interface {
-	mustEmbedUnimplementedDomainsServiceServer()
-}
-
-func RegisterDomainsServiceServer(s grpc.ServiceRegistrar, srv DomainsServiceServer) {
-	// If the following call pancis, it indicates UnimplementedDomainsServiceServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&DomainsService_ServiceDesc, srv)
-}
-
-func _DomainsService_DeleteUserFromDomains_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(DeleteUserReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(DomainsServiceServer).DeleteUserFromDomains(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: DomainsService_DeleteUserFromDomains_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(DomainsServiceServer).DeleteUserFromDomains(ctx, req.(*DeleteUserReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _DomainsService_RetrieveStatus_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveEntityReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(DomainsServiceServer).RetrieveStatus(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: DomainsService_RetrieveStatus_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(DomainsServiceServer).RetrieveStatus(ctx, req.(*v1.RetrieveEntityReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _DomainsService_RetrieveIDByRoute_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveIDByRouteReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(DomainsServiceServer).RetrieveIDByRoute(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: DomainsService_RetrieveIDByRoute_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(DomainsServiceServer).RetrieveIDByRoute(ctx, req.(*v1.RetrieveIDByRouteReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// DomainsService_ServiceDesc is the grpc.ServiceDesc for DomainsService service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var DomainsService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "domains.v1.DomainsService",
-	HandlerType: (*DomainsServiceServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "DeleteUserFromDomains",
-			Handler:    _DomainsService_DeleteUserFromDomains_Handler,
-		},
-		{
-			MethodName: "RetrieveStatus",
-			Handler:    _DomainsService_RetrieveStatus_Handler,
-		},
-		{
-			MethodName: "RetrieveIDByRoute",
-			Handler:    _DomainsService_RetrieveIDByRoute_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "domains/v1/domains.proto",
-}

api/grpc/groups/v1/groups.pb.go

@@ -1,70 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: groups/v1/groups.proto
-
-package v1
-
-import (
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-var File_groups_v1_groups_proto protoreflect.FileDescriptor
-
-const file_groups_v1_groups_proto_rawDesc = "" +
-	"\n" +
-	"\x16groups/v1/groups.proto\x12\tgroups.v1\x1a\x16common/v1/common.proto2_\n" +
-	"\rGroupsService\x12N\n" +
-	"\x0eRetrieveEntity\x12\x1c.common.v1.RetrieveEntityReq\x1a\x1c.common.v1.RetrieveEntityRes\"\x00B/Z-github.com/absmach/supermq/api/grpc/groups/v1b\x06proto3"
-
-var file_groups_v1_groups_proto_goTypes = []any{
-	(*v1.RetrieveEntityReq)(nil), // 0: common.v1.RetrieveEntityReq
-	(*v1.RetrieveEntityRes)(nil), // 1: common.v1.RetrieveEntityRes
-}
-var file_groups_v1_groups_proto_depIdxs = []int32{
-	0, // 0: groups.v1.GroupsService.RetrieveEntity:input_type -> common.v1.RetrieveEntityReq
-	1, // 1: groups.v1.GroupsService.RetrieveEntity:output_type -> common.v1.RetrieveEntityRes
-	1, // [1:2] is the sub-list for method output_type
-	0, // [0:1] is the sub-list for method input_type
-	0, // [0:0] is the sub-list for extension type_name
-	0, // [0:0] is the sub-list for extension extendee
-	0, // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_groups_v1_groups_proto_init() }
-func file_groups_v1_groups_proto_init() {
-	if File_groups_v1_groups_proto != nil {
-		return
-	}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_groups_v1_groups_proto_rawDesc), len(file_groups_v1_groups_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   0,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_groups_v1_groups_proto_goTypes,
-		DependencyIndexes: file_groups_v1_groups_proto_depIdxs,
-	}.Build()
-	File_groups_v1_groups_proto = out.File
-	file_groups_v1_groups_proto_goTypes = nil
-	file_groups_v1_groups_proto_depIdxs = nil
-}

api/grpc/groups/v1/groups_grpc.pb.go

@@ -1,131 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.0
-// source: groups/v1/groups.proto
-
-package v1
-
-import (
-	context "context"
-	v1 "github.com/absmach/supermq/api/grpc/common/v1"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	GroupsService_RetrieveEntity_FullMethodName = "/groups.v1.GroupsService/RetrieveEntity"
-)
-
-// GroupsServiceClient is the client API for GroupsService service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-//
-// GroupssService is a service that provides groups
-// functionalities for SuperMQ services.
-type GroupsServiceClient interface {
-	RetrieveEntity(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error)
-}
-
-type groupsServiceClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewGroupsServiceClient(cc grpc.ClientConnInterface) GroupsServiceClient {
-	return &groupsServiceClient{cc}
-}
-
-func (c *groupsServiceClient) RetrieveEntity(ctx context.Context, in *v1.RetrieveEntityReq, opts ...grpc.CallOption) (*v1.RetrieveEntityRes, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(v1.RetrieveEntityRes)
-	err := c.cc.Invoke(ctx, GroupsService_RetrieveEntity_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// GroupsServiceServer is the server API for GroupsService service.
-// All implementations must embed UnimplementedGroupsServiceServer
-// for forward compatibility.
-//
-// GroupssService is a service that provides groups
-// functionalities for SuperMQ services.
-type GroupsServiceServer interface {
-	RetrieveEntity(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error)
-	mustEmbedUnimplementedGroupsServiceServer()
-}
-
-// UnimplementedGroupsServiceServer must be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedGroupsServiceServer struct{}
-
-func (UnimplementedGroupsServiceServer) RetrieveEntity(context.Context, *v1.RetrieveEntityReq) (*v1.RetrieveEntityRes, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method RetrieveEntity not implemented")
-}
-func (UnimplementedGroupsServiceServer) mustEmbedUnimplementedGroupsServiceServer() {}
-func (UnimplementedGroupsServiceServer) testEmbeddedByValue()                       {}
-
-// UnsafeGroupsServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to GroupsServiceServer will
-// result in compilation errors.
-type UnsafeGroupsServiceServer interface {
-	mustEmbedUnimplementedGroupsServiceServer()
-}
-
-func RegisterGroupsServiceServer(s grpc.ServiceRegistrar, srv GroupsServiceServer) {
-	// If the following call pancis, it indicates UnimplementedGroupsServiceServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&GroupsService_ServiceDesc, srv)
-}
-
-func _GroupsService_RetrieveEntity_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(v1.RetrieveEntityReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(GroupsServiceServer).RetrieveEntity(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: GroupsService_RetrieveEntity_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(GroupsServiceServer).RetrieveEntity(ctx, req.(*v1.RetrieveEntityReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// GroupsService_ServiceDesc is the grpc.ServiceDesc for GroupsService service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var GroupsService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "groups.v1.GroupsService",
-	HandlerType: (*GroupsServiceServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "RetrieveEntity",
-			Handler:    _GroupsService_RetrieveEntity_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "groups/v1/groups.proto",
-}

api/grpc/token/v1/token.pb.go

@@ -1,287 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go. DO NOT EDIT.
-// versions:
-// 	protoc-gen-go v1.36.10
-// 	protoc        v6.33.0
-// source: token/v1/token.proto
-
-package v1
-
-import (
-	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
-	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
-	reflect "reflect"
-	sync "sync"
-	unsafe "unsafe"
-)
-
-const (
-	// Verify that this generated code is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
-	// Verify that runtime/protoimpl is sufficiently up-to-date.
-	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
-)
-
-type IssueReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	UserId        string                 `protobuf:"bytes,1,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
-	UserRole      uint32                 `protobuf:"varint,2,opt,name=user_role,json=userRole,proto3" json:"user_role,omitempty"`
-	Type          uint32                 `protobuf:"varint,3,opt,name=type,proto3" json:"type,omitempty"`
-	Verified      bool                   `protobuf:"varint,4,opt,name=verified,proto3" json:"verified,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *IssueReq) Reset() {
-	*x = IssueReq{}
-	mi := &file_token_v1_token_proto_msgTypes[0]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *IssueReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*IssueReq) ProtoMessage() {}
-
-func (x *IssueReq) ProtoReflect() protoreflect.Message {
-	mi := &file_token_v1_token_proto_msgTypes[0]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use IssueReq.ProtoReflect.Descriptor instead.
-func (*IssueReq) Descriptor() ([]byte, []int) {
-	return file_token_v1_token_proto_rawDescGZIP(), []int{0}
-}
-
-func (x *IssueReq) GetUserId() string {
-	if x != nil {
-		return x.UserId
-	}
-	return ""
-}
-
-func (x *IssueReq) GetUserRole() uint32 {
-	if x != nil {
-		return x.UserRole
-	}
-	return 0
-}
-
-func (x *IssueReq) GetType() uint32 {
-	if x != nil {
-		return x.Type
-	}
-	return 0
-}
-
-func (x *IssueReq) GetVerified() bool {
-	if x != nil {
-		return x.Verified
-	}
-	return false
-}
-
-type RefreshReq struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	RefreshToken  string                 `protobuf:"bytes,1,opt,name=refresh_token,json=refreshToken,proto3" json:"refresh_token,omitempty"`
-	Verified      bool                   `protobuf:"varint,2,opt,name=verified,proto3" json:"verified,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *RefreshReq) Reset() {
-	*x = RefreshReq{}
-	mi := &file_token_v1_token_proto_msgTypes[1]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *RefreshReq) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*RefreshReq) ProtoMessage() {}
-
-func (x *RefreshReq) ProtoReflect() protoreflect.Message {
-	mi := &file_token_v1_token_proto_msgTypes[1]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use RefreshReq.ProtoReflect.Descriptor instead.
-func (*RefreshReq) Descriptor() ([]byte, []int) {
-	return file_token_v1_token_proto_rawDescGZIP(), []int{1}
-}
-
-func (x *RefreshReq) GetRefreshToken() string {
-	if x != nil {
-		return x.RefreshToken
-	}
-	return ""
-}
-
-func (x *RefreshReq) GetVerified() bool {
-	if x != nil {
-		return x.Verified
-	}
-	return false
-}
-
-// If a token is not carrying any information itself, the type
-// field can be used to determine how to validate the token.
-// Also, different tokens can be encoded in different ways.
-type Token struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
-	AccessToken   string                 `protobuf:"bytes,1,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
-	RefreshToken  *string                `protobuf:"bytes,2,opt,name=refresh_token,json=refreshToken,proto3,oneof" json:"refresh_token,omitempty"`
-	AccessType    string                 `protobuf:"bytes,3,opt,name=access_type,json=accessType,proto3" json:"access_type,omitempty"`
-	unknownFields protoimpl.UnknownFields
-	sizeCache     protoimpl.SizeCache
-}
-
-func (x *Token) Reset() {
-	*x = Token{}
-	mi := &file_token_v1_token_proto_msgTypes[2]
-	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-	ms.StoreMessageInfo(mi)
-}
-
-func (x *Token) String() string {
-	return protoimpl.X.MessageStringOf(x)
-}
-
-func (*Token) ProtoMessage() {}
-
-func (x *Token) ProtoReflect() protoreflect.Message {
-	mi := &file_token_v1_token_proto_msgTypes[2]
-	if x != nil {
-		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
-		if ms.LoadMessageInfo() == nil {
-			ms.StoreMessageInfo(mi)
-		}
-		return ms
-	}
-	return mi.MessageOf(x)
-}
-
-// Deprecated: Use Token.ProtoReflect.Descriptor instead.
-func (*Token) Descriptor() ([]byte, []int) {
-	return file_token_v1_token_proto_rawDescGZIP(), []int{2}
-}
-
-func (x *Token) GetAccessToken() string {
-	if x != nil {
-		return x.AccessToken
-	}
-	return ""
-}
-
-func (x *Token) GetRefreshToken() string {
-	if x != nil && x.RefreshToken != nil {
-		return *x.RefreshToken
-	}
-	return ""
-}
-
-func (x *Token) GetAccessType() string {
-	if x != nil {
-		return x.AccessType
-	}
-	return ""
-}
-
-var File_token_v1_token_proto protoreflect.FileDescriptor
-
-const file_token_v1_token_proto_rawDesc = "" +
-	"\n" +
-	"\x14token/v1/token.proto\x12\btoken.v1\"p\n" +
-	"\bIssueReq\x12\x17\n" +
-	"\auser_id\x18\x01 \x01(\tR\x06userId\x12\x1b\n" +
-	"\tuser_role\x18\x02 \x01(\rR\buserRole\x12\x12\n" +
-	"\x04type\x18\x03 \x01(\rR\x04type\x12\x1a\n" +
-	"\bverified\x18\x04 \x01(\bR\bverified\"M\n" +
-	"\n" +
-	"RefreshReq\x12#\n" +
-	"\rrefresh_token\x18\x01 \x01(\tR\frefreshToken\x12\x1a\n" +
-	"\bverified\x18\x02 \x01(\bR\bverified\"\x87\x01\n" +
-	"\x05Token\x12!\n" +
-	"\faccess_token\x18\x01 \x01(\tR\vaccessToken\x12(\n" +
-	"\rrefresh_token\x18\x02 \x01(\tH\x00R\frefreshToken\x88\x01\x01\x12\x1f\n" +
-	"\vaccess_type\x18\x03 \x01(\tR\n" +
-	"accessTypeB\x10\n" +
-	"\x0e_refresh_token2r\n" +
-	"\fTokenService\x12.\n" +
-	"\x05Issue\x12\x12.token.v1.IssueReq\x1a\x0f.token.v1.Token\"\x00\x122\n" +
-	"\aRefresh\x12\x14.token.v1.RefreshReq\x1a\x0f.token.v1.Token\"\x00B.Z,github.com/absmach/supermq/api/grpc/token/v1b\x06proto3"
-
-var (
-	file_token_v1_token_proto_rawDescOnce sync.Once
-	file_token_v1_token_proto_rawDescData []byte
-)
-
-func file_token_v1_token_proto_rawDescGZIP() []byte {
-	file_token_v1_token_proto_rawDescOnce.Do(func() {
-		file_token_v1_token_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_token_v1_token_proto_rawDesc), len(file_token_v1_token_proto_rawDesc)))
-	})
-	return file_token_v1_token_proto_rawDescData
-}
-
-var file_token_v1_token_proto_msgTypes = make([]protoimpl.MessageInfo, 3)
-var file_token_v1_token_proto_goTypes = []any{
-	(*IssueReq)(nil),   // 0: token.v1.IssueReq
-	(*RefreshReq)(nil), // 1: token.v1.RefreshReq
-	(*Token)(nil),      // 2: token.v1.Token
-}
-var file_token_v1_token_proto_depIdxs = []int32{
-	0, // 0: token.v1.TokenService.Issue:input_type -> token.v1.IssueReq
-	1, // 1: token.v1.TokenService.Refresh:input_type -> token.v1.RefreshReq
-	2, // 2: token.v1.TokenService.Issue:output_type -> token.v1.Token
-	2, // 3: token.v1.TokenService.Refresh:output_type -> token.v1.Token
-	2, // [2:4] is the sub-list for method output_type
-	0, // [0:2] is the sub-list for method input_type
-	0, // [0:0] is the sub-list for extension type_name
-	0, // [0:0] is the sub-list for extension extendee
-	0, // [0:0] is the sub-list for field type_name
-}
-
-func init() { file_token_v1_token_proto_init() }
-func file_token_v1_token_proto_init() {
-	if File_token_v1_token_proto != nil {
-		return
-	}
-	file_token_v1_token_proto_msgTypes[2].OneofWrappers = []any{}
-	type x struct{}
-	out := protoimpl.TypeBuilder{
-		File: protoimpl.DescBuilder{
-			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
-			RawDescriptor: unsafe.Slice(unsafe.StringData(file_token_v1_token_proto_rawDesc), len(file_token_v1_token_proto_rawDesc)),
-			NumEnums:      0,
-			NumMessages:   3,
-			NumExtensions: 0,
-			NumServices:   1,
-		},
-		GoTypes:           file_token_v1_token_proto_goTypes,
-		DependencyIndexes: file_token_v1_token_proto_depIdxs,
-		MessageInfos:      file_token_v1_token_proto_msgTypes,
-	}.Build()
-	File_token_v1_token_proto = out.File
-	file_token_v1_token_proto_goTypes = nil
-	file_token_v1_token_proto_depIdxs = nil
-}

api/grpc/token/v1/token_grpc.pb.go

@@ -1,162 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by protoc-gen-go-grpc. DO NOT EDIT.
-// versions:
-// - protoc-gen-go-grpc v1.5.1
-// - protoc             v6.33.0
-// source: token/v1/token.proto
-
-package v1
-
-import (
-	context "context"
-	grpc "google.golang.org/grpc"
-	codes "google.golang.org/grpc/codes"
-	status "google.golang.org/grpc/status"
-)
-
-// This is a compile-time assertion to ensure that this generated file
-// is compatible with the grpc package it is being compiled against.
-// Requires gRPC-Go v1.64.0 or later.
-const _ = grpc.SupportPackageIsVersion9
-
-const (
-	TokenService_Issue_FullMethodName   = "/token.v1.TokenService/Issue"
-	TokenService_Refresh_FullMethodName = "/token.v1.TokenService/Refresh"
-)
-
-// TokenServiceClient is the client API for TokenService service.
-//
-// For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
-type TokenServiceClient interface {
-	Issue(ctx context.Context, in *IssueReq, opts ...grpc.CallOption) (*Token, error)
-	Refresh(ctx context.Context, in *RefreshReq, opts ...grpc.CallOption) (*Token, error)
-}
-
-type tokenServiceClient struct {
-	cc grpc.ClientConnInterface
-}
-
-func NewTokenServiceClient(cc grpc.ClientConnInterface) TokenServiceClient {
-	return &tokenServiceClient{cc}
-}
-
-func (c *tokenServiceClient) Issue(ctx context.Context, in *IssueReq, opts ...grpc.CallOption) (*Token, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(Token)
-	err := c.cc.Invoke(ctx, TokenService_Issue_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-func (c *tokenServiceClient) Refresh(ctx context.Context, in *RefreshReq, opts ...grpc.CallOption) (*Token, error) {
-	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
-	out := new(Token)
-	err := c.cc.Invoke(ctx, TokenService_Refresh_FullMethodName, in, out, cOpts...)
-	if err != nil {
-		return nil, err
-	}
-	return out, nil
-}
-
-// TokenServiceServer is the server API for TokenService service.
-// All implementations must embed UnimplementedTokenServiceServer
-// for forward compatibility.
-type TokenServiceServer interface {
-	Issue(context.Context, *IssueReq) (*Token, error)
-	Refresh(context.Context, *RefreshReq) (*Token, error)
-	mustEmbedUnimplementedTokenServiceServer()
-}
-
-// UnimplementedTokenServiceServer must be embedded to have
-// forward compatible implementations.
-//
-// NOTE: this should be embedded by value instead of pointer to avoid a nil
-// pointer dereference when methods are called.
-type UnimplementedTokenServiceServer struct{}
-
-func (UnimplementedTokenServiceServer) Issue(context.Context, *IssueReq) (*Token, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method Issue not implemented")
-}
-func (UnimplementedTokenServiceServer) Refresh(context.Context, *RefreshReq) (*Token, error) {
-	return nil, status.Errorf(codes.Unimplemented, "method Refresh not implemented")
-}
-func (UnimplementedTokenServiceServer) mustEmbedUnimplementedTokenServiceServer() {}
-func (UnimplementedTokenServiceServer) testEmbeddedByValue()                      {}
-
-// UnsafeTokenServiceServer may be embedded to opt out of forward compatibility for this service.
-// Use of this interface is not recommended, as added methods to TokenServiceServer will
-// result in compilation errors.
-type UnsafeTokenServiceServer interface {
-	mustEmbedUnimplementedTokenServiceServer()
-}
-
-func RegisterTokenServiceServer(s grpc.ServiceRegistrar, srv TokenServiceServer) {
-	// If the following call pancis, it indicates UnimplementedTokenServiceServer was
-	// embedded by pointer and is nil.  This will cause panics if an
-	// unimplemented method is ever invoked, so we test this at initialization
-	// time to prevent it from happening at runtime later due to I/O.
-	if t, ok := srv.(interface{ testEmbeddedByValue() }); ok {
-		t.testEmbeddedByValue()
-	}
-	s.RegisterService(&TokenService_ServiceDesc, srv)
-}
-
-func _TokenService_Issue_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(IssueReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(TokenServiceServer).Issue(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: TokenService_Issue_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(TokenServiceServer).Issue(ctx, req.(*IssueReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-func _TokenService_Refresh_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
-	in := new(RefreshReq)
-	if err := dec(in); err != nil {
-		return nil, err
-	}
-	if interceptor == nil {
-		return srv.(TokenServiceServer).Refresh(ctx, in)
-	}
-	info := &grpc.UnaryServerInfo{
-		Server:     srv,
-		FullMethod: TokenService_Refresh_FullMethodName,
-	}
-	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
-		return srv.(TokenServiceServer).Refresh(ctx, req.(*RefreshReq))
-	}
-	return interceptor(ctx, in, info, handler)
-}
-
-// TokenService_ServiceDesc is the grpc.ServiceDesc for TokenService service.
-// It's only intended for direct use with grpc.RegisterService,
-// and not to be introspected or modified (even as a copy)
-var TokenService_ServiceDesc = grpc.ServiceDesc{
-	ServiceName: "token.v1.TokenService",
-	HandlerType: (*TokenServiceServer)(nil),
-	Methods: []grpc.MethodDesc{
-		{
-			MethodName: "Issue",
-			Handler:    _TokenService_Issue_Handler,
-		},
-		{
-			MethodName: "Refresh",
-			Handler:    _TokenService_Refresh_Handler,
-		},
-	},
-	Streams:  []grpc.StreamDesc{},
-	Metadata: "token/v1/token.proto",
-}

api/http/common.go

@@ -1,331 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package http
-
-import (
-	"context"
-	"encoding/json"
-	"net/http"
-	"net/mail"
-	"regexp"
-	"strings"
-
-	"github.com/absmach/supermq"
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/clients"
-	"github.com/absmach/supermq/groups"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/absmach/supermq/users"
-	"github.com/gofrs/uuid/v5"
-)
-
-const (
-	OffsetKey = "offset"
-	DirKey    = "dir"
-	OrderKey  = "order"
-	LimitKey  = "limit"
-	OnlyTotal = "only_total"
-
-	NameOrder      = "name"
-	IDOrder        = "id"
-	AscDir         = "asc"
-	DescDir        = "desc"
-	UpdatedAtOrder = "updated_at"
-	CreatedAtOrder = "created_at"
-
-	MetadataKey = "metadata"
-	NameKey     = "name"
-	TagKey      = "tag"
-	StatusKey   = "status"
-
-	ClientKey   = "client"
-	ChannelKey  = "channel"
-	ConnTypeKey = "connection_type"
-	GroupKey    = "group"
-	DomainKey   = "domain"
-
-	StartLevelKey = "start_level"
-	EndLevelKey   = "end_level"
-	TreeKey       = "tree"
-	ParentKey     = "parent_id"
-	LevelKey      = "level"
-	RootGroupKey  = "root_group"
-
-	TokenKey   = "token"
-	SubjectKey = "subject"
-	ObjectKey  = "object"
-
-	RolesKey            = "roles"
-	ActionKey           = "action"
-	ActionsKey          = "actions"
-	RoleIDKey           = "role_id"
-	RoleNameKey         = "role_name"
-	AccessProviderIDKey = "access_provider_id"
-	AccessTypeKey       = "access_type"
-
-	UsernameKey  = "username"
-	UserKey      = "user"
-	EmailKey     = "email"
-	FirstNameKey = "first_name"
-	LastNameKey  = "last_name"
-
-	DefTotal        = uint64(100)
-	DefOffset       = 0
-	DefOrder        = "updated_at"
-	DefDir          = "desc"
-	DefLimit        = 10
-	DefLevel        = 0
-	DefStartLevel   = 1
-	DefEndLevel     = 0
-	DefStatus       = "enabled"
-	DefClientStatus = clients.Enabled
-	DefUserStatus   = users.Enabled
-	DefGroupStatus  = groups.Enabled
-
-	// ContentType represents JSON content type.
-	ContentType = "application/json"
-
-	// MaxNameSize limits name size to prevent making them too complex.
-	MaxLimitSize = 100
-	MaxNameSize  = 1024
-	MaxIDSize    = 36
-)
-
-var (
-	nameRegExp        = regexp.MustCompile(`^[a-z0-9][a-z0-9_-]{34}[a-z0-9]$`)
-	routeRegExp       = regexp.MustCompile(`^[a-zA-Z][a-zA-Z0-9_-]{0,35}$`)
-	userNameRegExp    = regexp.MustCompile(`^[a-zA-Z0-9][a-zA-Z0-9_-]{0,31}$`)
-	errUnreadableName = errors.New("name containing double underscores or double dashes not allowed")
-)
-
-// ValidateUUID validates UUID format.
-func ValidateUUID(extID string) (err error) {
-	id, err := uuid.FromString(extID)
-	if id.String() != extID || err != nil {
-		return apiutil.ErrInvalidIDFormat
-	}
-
-	return nil
-}
-
-func ValidateEmail(email string) (err error) {
-	if _, err := mail.ParseAddress(email); err != nil {
-		return apiutil.ErrInvalidEmail
-	}
-	return nil
-}
-
-// ValidateName validates name format.
-func ValidateName(id string) error {
-	if !nameRegExp.MatchString(id) {
-		return apiutil.ErrInvalidNameFormat
-	}
-	// Names containing double underscores or double dashes are invalid due to similarity concerns.
-	if strings.Contains(id, "__") || strings.Contains(id, "--") {
-		return errors.Wrap(apiutil.ErrInvalidNameFormat, errUnreadableName)
-	}
-
-	return nil
-}
-
-// ValidateRoute validates route format.
-func ValidateRoute(route string) error {
-	if !routeRegExp.MatchString(route) {
-		return apiutil.ErrInvalidRouteFormat
-	}
-
-	if strings.Contains(route, "__") || strings.Contains(route, "--") {
-		return errors.Wrap(apiutil.ErrInvalidRouteFormat, errUnreadableName)
-	}
-
-	return nil
-}
-
-// ValidateUserName validates user name format.
-func ValidateUserName(name string) error {
-	if !userNameRegExp.MatchString(name) {
-		return apiutil.ErrInvalidUsername
-	}
-
-	if strings.Contains(name, "__") || strings.Contains(name, "--") {
-		return errors.Wrap(apiutil.ErrInvalidUsername, errUnreadableName)
-	}
-
-	return nil
-}
-
-// EncodeResponse encodes successful response.
-func EncodeResponse(_ context.Context, w http.ResponseWriter, response any) error {
-	if ar, ok := response.(supermq.Response); ok {
-		for k, v := range ar.Headers() {
-			w.Header().Set(k, v)
-		}
-		w.Header().Set("Content-Type", ContentType)
-		w.WriteHeader(ar.Code())
-
-		if ar.Empty() {
-			return nil
-		}
-	}
-
-	return json.NewEncoder(w).Encode(response)
-}
-
-// EncodeError encodes an error response.
-func EncodeError(_ context.Context, err error, w http.ResponseWriter) {
-	w.Header().Set("Content-Type", ContentType)
-	if sdkErr, ok := err.(errors.SDKError); ok {
-		w.WriteHeader(sdkErr.StatusCode())
-		if err := json.NewEncoder(w).Encode(sdkErr); err != nil {
-			w.WriteHeader(http.StatusInternalServerError)
-		}
-		return
-	}
-
-	var wrapper error
-	if errors.Contains(err, apiutil.ErrValidation) {
-		wrapper, err = errors.Unwrap(err)
-	}
-
-	switch {
-	case errors.Contains(err, errors.ErrTryAgain):
-		w.WriteHeader(http.StatusUnprocessableEntity)
-	case errors.Contains(err, errors.ErrEmailAlreadyExists),
-		errors.Contains(err, errors.ErrUsernameNotAvailable),
-		errors.Contains(err, errors.ErrRouteNotAvailable),
-		errors.Contains(err, errors.ErrChannelRouteNotAvailable),
-		errors.Contains(err, errors.ErrDomainRouteNotAvailable),
-		errors.Contains(err, svcerr.ErrExternalAuthProviderCouldNotChangePassword),
-		errors.Contains(err, svcerr.ErrExternalAuthProviderCouldNotResetPassword),
-		errors.Contains(err, svcerr.ErrExternalAuthProviderCouldNotUpdate):
-		w.WriteHeader(http.StatusBadRequest)
-	case errors.Contains(err, svcerr.ErrAuthorization),
-		errors.Contains(err, svcerr.ErrDomainAuthorization),
-		errors.Contains(err, svcerr.ErrUnauthorizedPAT),
-		errors.Contains(err, svcerr.ErrSuperAdminAction):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusForbidden)
-
-	case errors.Contains(err, svcerr.ErrAuthentication),
-		errors.Contains(err, apiutil.ErrBearerToken),
-		errors.Contains(err, svcerr.ErrLogin),
-		errors.Contains(err, apiutil.ErrUnsupportedTokenType):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusUnauthorized)
-	case errors.Contains(err, svcerr.ErrMalformedEntity),
-		errors.Contains(err, apiutil.ErrMalformedPolicy),
-		errors.Contains(err, apiutil.ErrMissingSecret),
-		errors.Contains(err, errors.ErrMalformedEntity),
-		errors.Contains(err, apiutil.ErrMissingID),
-		errors.Contains(err, apiutil.ErrInvalidVerification),
-		errors.Contains(err, apiutil.ErrMissingName),
-		errors.Contains(err, apiutil.ErrMissingEmail),
-		errors.Contains(err, apiutil.ErrInvalidEmail),
-		errors.Contains(err, apiutil.ErrMissingHost),
-		errors.Contains(err, apiutil.ErrInvalidResetPass),
-		errors.Contains(err, apiutil.ErrEmptyList),
-		errors.Contains(err, apiutil.ErrMissingMemberKind),
-		errors.Contains(err, apiutil.ErrMissingMemberType),
-		errors.Contains(err, apiutil.ErrLimitSize),
-		errors.Contains(err, apiutil.ErrBearerKey),
-		errors.Contains(err, svcerr.ErrInvalidStatus),
-		errors.Contains(err, apiutil.ErrNameSize),
-		errors.Contains(err, apiutil.ErrInvalidIDFormat),
-		errors.Contains(err, apiutil.ErrInvalidQueryParams),
-		errors.Contains(err, apiutil.ErrMissingRelation),
-		errors.Contains(err, apiutil.ErrValidation),
-		errors.Contains(err, apiutil.ErrMissingPass),
-		errors.Contains(err, apiutil.ErrMissingConfPass),
-		errors.Contains(err, apiutil.ErrPasswordFormat),
-		errors.Contains(err, svcerr.ErrInvalidRole),
-		errors.Contains(err, svcerr.ErrInvalidPolicy),
-		errors.Contains(err, apiutil.ErrInvitationState),
-		errors.Contains(err, apiutil.ErrInvalidAPIKey),
-		errors.Contains(err, svcerr.ErrViewEntity),
-		errors.Contains(err, apiutil.ErrMissingCertData),
-		errors.Contains(err, apiutil.ErrInvalidContact),
-		errors.Contains(err, apiutil.ErrInvalidTopic),
-		errors.Contains(err, apiutil.ErrInvalidCertData),
-		errors.Contains(err, apiutil.ErrEmptyMessage),
-		errors.Contains(err, apiutil.ErrInvalidLevel),
-		errors.Contains(err, apiutil.ErrInvalidDirection),
-		errors.Contains(err, apiutil.ErrInvalidEntityType),
-		errors.Contains(err, apiutil.ErrMissingEntityType),
-		errors.Contains(err, apiutil.ErrInvalidTimeFormat),
-		errors.Contains(err, svcerr.ErrSearch),
-		errors.Contains(err, apiutil.ErrEmptySearchQuery),
-		errors.Contains(err, apiutil.ErrLenSearchQuery),
-		errors.Contains(err, apiutil.ErrMissingDomainID),
-		errors.Contains(err, apiutil.ErrMissingUserID),
-		errors.Contains(err, apiutil.ErrMissingPATID),
-		errors.Contains(err, apiutil.ErrMissingUsername),
-		errors.Contains(err, apiutil.ErrMissingUsernameEmail),
-		errors.Contains(err, apiutil.ErrMissingFirstName),
-		errors.Contains(err, apiutil.ErrMissingLastName),
-		errors.Contains(err, apiutil.ErrInvalidUsername),
-		errors.Contains(err, apiutil.ErrMissingIdentity),
-		errors.Contains(err, apiutil.ErrInvalidProfilePictureURL),
-		errors.Contains(err, apiutil.ErrSelfParentingNotAllowed),
-		errors.Contains(err, apiutil.ErrMissingChildrenGroupIDs),
-		errors.Contains(err, apiutil.ErrMissingParentGroupID),
-		errors.Contains(err, apiutil.ErrMissingConnectionType),
-		errors.Contains(err, apiutil.ErrMissingRoleName),
-		errors.Contains(err, apiutil.ErrMissingRoleID),
-		errors.Contains(err, apiutil.ErrMissingPolicyEntityType),
-		errors.Contains(err, apiutil.ErrMissingRoleMembers),
-		errors.Contains(err, apiutil.ErrMissingDescription),
-		errors.Contains(err, apiutil.ErrMissingEntityID),
-		errors.Contains(err, apiutil.ErrInvalidRouteFormat),
-		errors.Contains(err, svcerr.ErrRetainOneMember),
-		errors.Contains(err, apiutil.ErrMissingRoute):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusBadRequest)
-
-	case errors.Contains(err, svcerr.ErrCreateEntity),
-		errors.Contains(err, svcerr.ErrUpdateEntity),
-		errors.Contains(err, svcerr.ErrRemoveEntity),
-		errors.Contains(err, svcerr.ErrEnableClient),
-		errors.Contains(err, svcerr.ErrEnableUser),
-		errors.Contains(err, svcerr.ErrDisableUser):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusUnprocessableEntity)
-
-	case errors.Contains(err, svcerr.ErrNotFound):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusNotFound)
-
-	case errors.Contains(err, errors.ErrStatusAlreadyAssigned),
-		errors.Contains(err, svcerr.ErrInvitationAlreadyRejected),
-		errors.Contains(err, svcerr.ErrInvitationAlreadyAccepted),
-		errors.Contains(err, svcerr.ErrConflict):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusConflict)
-
-	case errors.Contains(err, apiutil.ErrUnsupportedContentType):
-		err = unwrap(err)
-		w.WriteHeader(http.StatusUnsupportedMediaType)
-
-	default:
-		w.WriteHeader(http.StatusInternalServerError)
-	}
-
-	if wrapper != nil {
-		err = errors.Wrap(wrapper, err)
-	}
-
-	if errorVal, ok := err.(errors.Error); ok {
-		if err := json.NewEncoder(w).Encode(errorVal); err != nil {
-			w.WriteHeader(http.StatusInternalServerError)
-		}
-	}
-}
-
-func unwrap(err error) error {
-	wrapper, err := errors.Unwrap(err)
-	if wrapper != nil {
-		return wrapper
-	}
-	return err
-}

api/http/common_test.go

@@ -1,338 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package http_test
-
-import (
-	"context"
-	"encoding/json"
-	"net/http"
-	"testing"
-	"time"
-
-	"github.com/absmach/supermq"
-	api "github.com/absmach/supermq/api/http"
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/internal/testsutil"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/stretchr/testify/assert"
-)
-
-var _ supermq.Response = (*response)(nil)
-
-var validUUID = testsutil.GenerateUUID(&testing.T{})
-
-type responseWriter struct {
-	body       []byte
-	statusCode int
-	header     http.Header
-}
-
-func newResponseWriter() *responseWriter {
-	return &responseWriter{
-		header: http.Header{},
-	}
-}
-
-func (w *responseWriter) Header() http.Header {
-	return w.header
-}
-
-func (w *responseWriter) Write(b []byte) (int, error) {
-	w.body = b
-	return 0, nil
-}
-
-func (w *responseWriter) WriteHeader(statusCode int) {
-	w.statusCode = statusCode
-}
-
-func (w *responseWriter) StatusCode() int {
-	return w.statusCode
-}
-
-func (w *responseWriter) Body() []byte {
-	return w.body
-}
-
-type response struct {
-	code    int
-	headers map[string]string
-	empty   bool
-
-	ID        string    `json:"id"`
-	Name      string    `json:"name"`
-	CreatedAt time.Time `json:"created_at"`
-}
-
-func (res response) Code() int {
-	return res.code
-}
-
-func (res response) Headers() map[string]string {
-	return res.headers
-}
-
-func (res response) Empty() bool {
-	return res.empty
-}
-
-type body struct {
-	Error   string `json:"error,omitempty"`
-	Message string `json:"message"`
-}
-
-func TestValidateUUID(t *testing.T) {
-	cases := []struct {
-		desc string
-		uuid string
-		err  error
-	}{
-		{
-			desc: "valid uuid",
-			uuid: validUUID,
-			err:  nil,
-		},
-		{
-			desc: "invalid uuid",
-			uuid: "invalid",
-			err:  apiutil.ErrInvalidIDFormat,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			err := api.ValidateUUID(c.uuid)
-			assert.Equal(t, c.err, err)
-		})
-	}
-}
-
-func TestEncodeResponse(t *testing.T) {
-	now := time.Now()
-	validBody := []byte(`{"id":"` + validUUID + `","name":"test","created_at":"` + now.Format(time.RFC3339Nano) + `"}` + "\n" + ``)
-
-	cases := []struct {
-		desc   string
-		resp   any
-		header http.Header
-		code   int
-		body   []byte
-		err    error
-	}{
-		{
-			desc: "valid response",
-			resp: response{
-				code: http.StatusOK,
-				headers: map[string]string{
-					"Location": "/groups/" + validUUID,
-				},
-				ID:        validUUID,
-				Name:      "test",
-				CreatedAt: now,
-			},
-			header: http.Header{
-				"Content-Type": []string{"application/json"},
-				"Location":     []string{"/groups/" + validUUID},
-			},
-			code: http.StatusOK,
-			body: validBody,
-			err:  nil,
-		},
-		{
-			desc: "valid response with no headers",
-			resp: response{
-				code:      http.StatusOK,
-				ID:        validUUID,
-				Name:      "test",
-				CreatedAt: now,
-			},
-			header: http.Header{
-				"Content-Type": []string{"application/json"},
-			},
-			code: http.StatusOK,
-			body: validBody,
-			err:  nil,
-		},
-		{
-			desc: "valid response with many headers",
-			resp: response{
-				code: http.StatusOK,
-				headers: map[string]string{
-					"X-Test":  "test",
-					"X-Test2": "test2",
-				},
-				ID:        validUUID,
-				Name:      "test",
-				CreatedAt: now,
-			},
-			header: http.Header{
-				"Content-Type": []string{"application/json"},
-				"X-Test":       []string{"test"},
-				"X-Test2":      []string{"test2"},
-			},
-			code: http.StatusOK,
-			body: validBody,
-			err:  nil,
-		},
-		{
-			desc: "valid response with empty body",
-			resp: response{
-				code:  http.StatusOK,
-				empty: true,
-				ID:    validUUID,
-			},
-			header: http.Header{
-				"Content-Type": []string{"application/json"},
-			},
-			code: http.StatusOK,
-			body: []byte(``),
-			err:  nil,
-		},
-		{
-			desc: "invalid response",
-			resp: struct {
-				ID string `json:"id"`
-			}{
-				ID: validUUID,
-			},
-			header: http.Header{},
-			code:   0,
-			body:   []byte(`{"id":"` + validUUID + `"}` + "\n" + ``),
-			err:    nil,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			responseWriter := newResponseWriter()
-			err := api.EncodeResponse(context.Background(), responseWriter, c.resp)
-			assert.Equal(t, c.err, err)
-			assert.Equal(t, c.header, responseWriter.Header())
-			assert.Equal(t, c.code, responseWriter.StatusCode())
-			assert.Equal(t, string(c.body), string(responseWriter.Body()))
-		})
-	}
-}
-
-func TestEncodeError(t *testing.T) {
-	cases := []struct {
-		desc string
-		errs []error
-		code int
-	}{
-		{
-			desc: "BadRequest",
-			errs: []error{
-				apiutil.ErrMissingSecret,
-				svcerr.ErrMalformedEntity,
-				errors.ErrMalformedEntity,
-				apiutil.ErrMissingID,
-				apiutil.ErrEmptyList,
-				apiutil.ErrMissingMemberType,
-				apiutil.ErrMissingMemberKind,
-				apiutil.ErrLimitSize,
-				apiutil.ErrNameSize,
-				svcerr.ErrViewEntity,
-			},
-			code: http.StatusBadRequest,
-		},
-		{
-			desc: "BadRequest with validation error",
-			errs: []error{
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrMissingSecret),
-				errors.Wrap(apiutil.ErrValidation, svcerr.ErrMalformedEntity),
-				errors.Wrap(apiutil.ErrValidation, errors.ErrMalformedEntity),
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrMissingID),
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrEmptyList),
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrMissingMemberType),
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrMissingMemberKind),
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrLimitSize),
-				errors.Wrap(apiutil.ErrValidation, apiutil.ErrNameSize),
-			},
-			code: http.StatusBadRequest,
-		},
-		{
-			desc: "Unauthorized",
-			errs: []error{
-				svcerr.ErrAuthentication,
-				svcerr.ErrAuthentication,
-				apiutil.ErrBearerToken,
-			},
-			code: http.StatusUnauthorized,
-		},
-
-		{
-			desc: "NotFound",
-			errs: []error{
-				svcerr.ErrNotFound,
-			},
-			code: http.StatusNotFound,
-		},
-		{
-			desc: "Conflict",
-			errs: []error{
-				svcerr.ErrConflict,
-				svcerr.ErrConflict,
-			},
-			code: http.StatusConflict,
-		},
-		{
-			desc: "Forbidden",
-			errs: []error{
-				svcerr.ErrAuthorization,
-				svcerr.ErrAuthorization,
-				svcerr.ErrDomainAuthorization,
-			},
-			code: http.StatusForbidden,
-		},
-		{
-			desc: "UnsupportedMediaType",
-			errs: []error{
-				apiutil.ErrUnsupportedContentType,
-			},
-			code: http.StatusUnsupportedMediaType,
-		},
-		{
-			desc: "StatusUnprocessableEntity",
-			errs: []error{
-				svcerr.ErrCreateEntity,
-				svcerr.ErrUpdateEntity,
-				svcerr.ErrRemoveEntity,
-			},
-			code: http.StatusUnprocessableEntity,
-		},
-		{
-			desc: "InternalServerError",
-			errs: []error{
-				errors.New("test"),
-			},
-			code: http.StatusInternalServerError,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			responseWriter := newResponseWriter()
-			for _, err := range c.errs {
-				api.EncodeError(context.Background(), err, responseWriter)
-				assert.Equal(t, c.code, responseWriter.StatusCode())
-
-				message := body{}
-				jerr := json.Unmarshal(responseWriter.Body(), &message)
-				assert.NoError(t, jerr)
-
-				var wrapper error
-				switch errors.Contains(err, apiutil.ErrValidation) {
-				case true:
-					wrapper, err = errors.Unwrap(err)
-					assert.Equal(t, err.Error(), message.Error)
-					assert.Equal(t, wrapper.Error(), message.Message)
-				case false:
-					assert.Equal(t, err.Error(), message.Message)
-				}
-			}
-		})
-	}
-}

api/http/doc.go

@@ -1,6 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package api contains commonly used constants and functions
-// for the HTTP API.
-package http

api/http/requests.go

@@ -1,27 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package http
-
-import (
-	"context"
-	"net/http"
-
-	"github.com/absmach/supermq"
-	"github.com/go-chi/chi/v5/middleware"
-)
-
-func RequestIDMiddleware(idp supermq.IDProvider) func(http.Handler) http.Handler {
-	return func(next http.Handler) http.Handler {
-		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-			requestID, err := idp.ID()
-			if err != nil {
-				EncodeError(r.Context(), err, w)
-				return
-			}
-
-			ctx := context.WithValue(r.Context(), middleware.RequestIDKey, requestID)
-			next.ServeHTTP(w, r.WithContext(ctx))
-		})
-	}
-}

api/http/util/errors.go

@@ -1,277 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package util
-
-import "github.com/absmach/supermq/pkg/errors"
-
-// Errors defined in this file are used by the LoggingErrorEncoder decorator
-// to distinguish and log API request validation errors and avoid that service
-// errors are logged twice.
-var (
-	// ErrValidation indicates that an error was returned by the API.
-	ErrValidation = errors.New("something went wrong with the request")
-
-	// ErrBearerToken indicates missing or invalid bearer user token.
-	ErrBearerToken = errors.New("missing or invalid bearer user token")
-
-	// ErrBearerKey indicates missing or invalid bearer entity key.
-	ErrBearerKey = errors.New("missing or invalid bearer entity key")
-
-	// ErrMissingID indicates missing entity ID.
-	ErrMissingID = errors.New("missing entity id")
-
-	// ErrMissingEntityID indicates missing entity ID.
-	ErrMissingEntityID = errors.New("missing entity id")
-
-	// ErrMissingClientID indicates missing client ID.
-	ErrMissingClientID = errors.New("missing cient id")
-
-	// ErrMissingChannelID indicates missing client ID.
-	ErrMissingChannelID = errors.New("missing channel id")
-
-	// ErrMissingConnectionType indicates missing connection tpye.
-	ErrMissingConnectionType = errors.New("missing connection type")
-
-	// ErrMissingParentGroupID indicates missing parent group ID.
-	ErrMissingParentGroupID = errors.New("missing parent group id")
-
-	// ErrMissingChildrenGroupIDs indicates missing children group IDs.
-	ErrMissingChildrenGroupIDs = errors.New("missing children group ids")
-
-	// ErrSelfParentingNotAllowed indicates child id is same as parent id.
-	ErrSelfParentingNotAllowed = errors.New("self parenting not allowed")
-
-	// ErrInvalidChildGroupID indicates invalid child group ID.
-	ErrInvalidChildGroupID = errors.New("invalid child group id")
-
-	// ErrInvalidAuthKey indicates invalid auth key.
-	ErrInvalidAuthKey = errors.New("invalid auth key")
-
-	// ErrInvalidIDFormat indicates an invalid ID format.
-	ErrInvalidIDFormat = errors.New("invalid id format provided")
-
-	// ErrNameSize indicates that name size exceeds the max.
-	ErrNameSize = errors.New("invalid name size")
-
-	// ErrEmailSize indicates that email size exceeds the max.
-	ErrEmailSize = errors.New("invalid email size")
-
-	// ErrInvalidRole indicates that an invalid role.
-	ErrInvalidRole = errors.New("invalid client role")
-
-	// ErrLimitSize indicates that an invalid limit.
-	ErrLimitSize = errors.New("invalid limit size")
-
-	// ErrLevel indicates that an invalid level.
-	ErrLevel = errors.New("invalid level")
-
-	// ErrOffsetSize indicates an invalid offset.
-	ErrOffsetSize = errors.New("invalid offset size")
-
-	// ErrInvalidOrder indicates an invalid list order.
-	ErrInvalidOrder = errors.New("invalid list order provided")
-
-	// ErrInvalidDirection indicates an invalid list direction.
-	ErrInvalidDirection = errors.New("invalid list direction provided")
-
-	// ErrInvalidMemberKind indicates an invalid member kind.
-	ErrInvalidMemberKind = errors.New("invalid member kind")
-
-	// ErrEmptyList indicates that entity data is empty.
-	ErrEmptyList = errors.New("empty list provided")
-
-	// ErrMissingRoleName indicates that role name is empty.
-	ErrMissingRoleName = errors.New("empty role name")
-
-	// ErrMissingRoleID indicates that role id is empty.
-	ErrMissingRoleID = errors.New("empty role id")
-
-	// ErrMissingRoleOperations indicates that role operations are empty.
-	ErrMissingRoleOperations = errors.New("empty role operations")
-
-	// ErrMissingRoleMembers indicates that role members are empty.
-	ErrMissingRoleMembers = errors.New("empty role members")
-
-	// ErrMalformedPolicy indicates that policies are malformed.
-	ErrMalformedPolicy = errors.New("malformed policy")
-
-	// ErrMissingPolicySub indicates that policies are subject.
-	ErrMissingPolicySub = errors.New("malformed policy subject")
-
-	// ErrMissingPolicyObj indicates missing policies object.
-	ErrMissingPolicyObj = errors.New("malformed policy object")
-
-	// ErrMalformedPolicyAct indicates missing policies action.
-	ErrMalformedPolicyAct = errors.New("malformed policy action")
-
-	// ErrMissingPolicyEntityType indicates missing policies entity type.
-	ErrMissingPolicyEntityType = errors.New("missing policy entity type")
-
-	// ErrMalformedPolicyPer indicates missing policies relation.
-	ErrMalformedPolicyPer = errors.New("malformed policy permission")
-
-	// ErrMissingCertData indicates missing cert data (ttl).
-	ErrMissingCertData = errors.New("missing certificate data")
-
-	// ErrInvalidCertData indicates invalid cert data (ttl).
-	ErrInvalidCertData = errors.New("invalid certificate data")
-
-	// ErrInvalidTopic indicates an invalid subscription topic.
-	ErrInvalidTopic = errors.New("invalid Subscription topic")
-
-	// ErrInvalidContact indicates an invalid subscription contract.
-	ErrInvalidContact = errors.New("invalid Subscription contact")
-
-	// ErrMissingEmail indicates missing email.
-	ErrMissingEmail = errors.New("missing email")
-
-	// ErrInvalidEmail indicates missing email.
-	ErrInvalidEmail = errors.New("invalid email")
-
-	// ErrMissingHost indicates missing host.
-	ErrMissingHost = errors.New("missing host")
-
-	// ErrMissingPass indicates missing password.
-	ErrMissingPass = errors.New("missing password")
-
-	// ErrMissingConfPass indicates missing conf password.
-	ErrMissingConfPass = errors.New("missing conf password")
-
-	// ErrInvalidResetPass indicates an invalid reset password.
-	ErrInvalidResetPass = errors.New("invalid reset password")
-
-	// ErrInvalidComparator indicates an invalid comparator.
-	ErrInvalidComparator = errors.New("invalid comparator")
-
-	// ErrMissingMemberIDs indicates missing member ids.
-	ErrMissingMemberIDs = errors.New("missing member ids")
-
-	// ErrMissingMemberType indicates missing group member type.
-	ErrMissingMemberType = errors.New("missing group member type")
-
-	// ErrMissingMemberKind indicates missing group member kind.
-	ErrMissingMemberKind = errors.New("missing group member kind")
-
-	// ErrMissingRelation indicates missing relation.
-	ErrMissingRelation = errors.New("missing relation")
-
-	// ErrInvalidRelation indicates an invalid relation.
-	ErrInvalidRelation = errors.New("invalid relation")
-
-	// ErrInvalidAPIKey indicates an invalid API key type.
-	ErrInvalidAPIKey = errors.New("invalid api key type")
-
-	// ErrInvitationState indicates an invalid invitation state.
-	ErrInvitationState = errors.New("invalid invitation state")
-
-	// ErrMissingIdentity indicates missing entity Identity.
-	ErrMissingIdentity = errors.New("missing entity identity")
-
-	// ErrMissingSecret indicates missing secret.
-	ErrMissingSecret = errors.New("missing secret")
-
-	// ErrPasswordFormat indicates weak password.
-	ErrPasswordFormat = errors.New("password does not meet the requirements")
-
-	// ErrMissingName indicates missing identity name.
-	ErrMissingName = errors.New("missing identity name")
-
-	// ErrMissingRoute indicates missing route.
-	ErrMissingRoute = errors.New("missing route")
-
-	// ErrInvalidLevel indicates an invalid group level.
-	ErrInvalidLevel = errors.New("invalid group level (should be between 0 and 5)")
-
-	// ErrNotFoundParam indicates that the parameter was not found in the query.
-	ErrNotFoundParam = errors.New("parameter not found in the query")
-
-	// ErrInvalidQueryParams indicates invalid query parameters.
-	ErrInvalidQueryParams = errors.New("invalid query parameters")
-
-	// ErrInvalidVisibilityType indicates invalid visibility type.
-	ErrInvalidVisibilityType = errors.New("invalid visibility type")
-
-	// ErrUnsupportedContentType indicates unacceptable or lack of Content-Type.
-	ErrUnsupportedContentType = errors.New("unsupported content type")
-
-	// ErrRollbackTx indicates failed to rollback transaction.
-	ErrRollbackTx = errors.New("failed to rollback transaction")
-
-	// ErrInvalidAggregation indicates invalid aggregation value.
-	ErrInvalidAggregation = errors.New("invalid aggregation value")
-
-	// ErrInvalidInterval indicates invalid interval value.
-	ErrInvalidInterval = errors.New("invalid interval value")
-
-	// ErrMissingFrom indicates missing from value.
-	ErrMissingFrom = errors.New("missing from time value")
-
-	// ErrMissingTo indicates missing to value.
-	ErrMissingTo = errors.New("missing to time value")
-
-	// ErrEmptyMessage indicates empty message.
-	ErrEmptyMessage = errors.New("empty message")
-
-	// ErrMissingEntityType indicates missing entity type.
-	ErrMissingEntityType = errors.New("missing entity type")
-
-	// ErrInvalidEntityType indicates invalid entity type.
-	ErrInvalidEntityType = errors.New("invalid entity type")
-
-	// ErrInvalidTimeFormat indicates invalid time format i.e not unix time.
-	ErrInvalidTimeFormat = errors.New("invalid time format use unix time")
-
-	// ErrEmptySearchQuery indicates search query should not be empty.
-	ErrEmptySearchQuery = errors.New("search query must not be empty")
-
-	// ErrLenSearchQuery indicates search query length.
-	ErrLenSearchQuery = errors.New("search query must be at least 3 characters")
-
-	// ErrMissingDomainID indicates missing domainID.
-	ErrMissingDomainID = errors.New("missing domainID")
-
-	// ErrMissingUsername indicates missing user name.
-	ErrMissingUsername = errors.New("missing username")
-
-	// ErrInvalidUsername indicates invalid user name.
-	ErrInvalidUsername = errors.New("invalid username")
-
-	// ErrMissingFirstName indicates missing first name.
-	ErrMissingFirstName = errors.New("missing first name")
-
-	// ErrMissingLastName indicates missing last name.
-	ErrMissingLastName = errors.New("missing last name")
-
-	// ErrInvalidProfilePictureURL indicates that the profile picture url is invalid.
-	ErrInvalidProfilePictureURL = errors.New("invalid profile picture url")
-
-	ErrMultipleEntitiesFilter = errors.New("multiple entities are provided in filter are not supported")
-
-	// ErrMissingDescription indicates missing description.
-	ErrMissingDescription = errors.New("missing description")
-
-	// ErrUnsupportedTokenType indicates that this type of token is not supported.
-	ErrUnsupportedTokenType = errors.New("unsupported content token type")
-
-	// ErrMissingUserID indicates missing user ID.
-	ErrMissingUserID = errors.New("missing user id")
-
-	// ErrMissingPATID indicates missing pat ID.
-	ErrMissingPATID = errors.New("missing pat id")
-
-	// ErrInvalidNameFormat indicates invalid name format.
-	ErrInvalidNameFormat = errors.New("invalid name format")
-
-	// ErrInvalidRouteFormat indicates invalid route format.
-	ErrInvalidRouteFormat = errors.New("invalid route format")
-
-	// ErrMissingUsernameEmail indicates missing user name / email.
-	ErrMissingUsernameEmail = errors.New("missing username / email")
-
-	// ErrInvalidVerification indicates invalid email verification.
-	ErrInvalidVerification = errors.New("invalid verification")
-
-	// ErrEmailNotVerified indicates invalid email not verified.
-	ErrEmailNotVerified = errors.New("email not verified")
-)

api/http/util/responses.go

@@ -1,10 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package util
-
-// ErrorRes represents the HTTP error response body.
-type ErrorRes struct {
-	Err string `json:"error"`
-	Msg string `json:"message"`
-}

api/http/util/token.go

@@ -1,37 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package util
-
-import (
-	"net/http"
-	"strings"
-)
-
-// BearerPrefix represents the token prefix for Bearer authentication scheme.
-const BearerPrefix = "Bearer "
-
-// ClientPrefix represents the key prefix for Client authentication scheme.
-const ClientPrefix = "Client "
-
-// ExtractBearerToken returns value of the bearer token. If there is no bearer token - an empty value is returned.
-func ExtractBearerToken(r *http.Request) string {
-	token := r.Header.Get("Authorization")
-
-	if !strings.HasPrefix(token, BearerPrefix) {
-		return ""
-	}
-
-	return strings.TrimPrefix(token, BearerPrefix)
-}
-
-// ExtractClientSecret returns value of the client secret. If it's not present - an empty value is returned.
-func ExtractClientSecret(r *http.Request) string {
-	token := r.Header.Get("Authorization")
-
-	if !strings.HasPrefix(token, ClientPrefix) {
-		return ""
-	}
-
-	return strings.TrimPrefix(token, ClientPrefix)
-}

api/http/util/token_test.go

@@ -1,112 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package util_test
-
-import (
-	"net/http"
-	"testing"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/stretchr/testify/assert"
-)
-
-func TestExtractBearerToken(t *testing.T) {
-	cases := []struct {
-		desc    string
-		request *http.Request
-		token   string
-	}{
-		{
-			desc: "valid bearer token",
-			request: &http.Request{
-				Header: map[string][]string{
-					"Authorization": {"Bearer 123"},
-				},
-			},
-			token: "123",
-		},
-		{
-			desc: "invalid bearer token",
-			request: &http.Request{
-				Header: map[string][]string{
-					"Authorization": {"123"},
-				},
-			},
-			token: "",
-		},
-		{
-			desc: "empty bearer token",
-			request: &http.Request{
-				Header: map[string][]string{
-					"Authorization": {""},
-				},
-			},
-			token: "",
-		},
-		{
-			desc: "empty header",
-			request: &http.Request{
-				Header: map[string][]string{},
-			},
-			token: "",
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			token := apiutil.ExtractBearerToken(c.request)
-			assert.Equal(t, c.token, token)
-		})
-	}
-}
-
-func TestExtractClientSecret(t *testing.T) {
-	cases := []struct {
-		desc    string
-		request *http.Request
-		token   string
-	}{
-		{
-			desc: "valid bearer token",
-			request: &http.Request{
-				Header: map[string][]string{
-					"Authorization": {"Client 123"},
-				},
-			},
-			token: "123",
-		},
-		{
-			desc: "invalid bearer token",
-			request: &http.Request{
-				Header: map[string][]string{
-					"Authorization": {"123"},
-				},
-			},
-			token: "",
-		},
-		{
-			desc: "empty bearer token",
-			request: &http.Request{
-				Header: map[string][]string{
-					"Authorization": {""},
-				},
-			},
-			token: "",
-		},
-		{
-			desc: "empty header",
-			request: &http.Request{
-				Header: map[string][]string{},
-			},
-			token: "",
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			token := apiutil.ExtractClientSecret(c.request)
-			assert.Equal(t, c.token, token)
-		})
-	}
-}

api/http/util/transport.go

@@ -1,123 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package util
-
-import (
-	"context"
-	"encoding/json"
-	"log/slog"
-	"net/http"
-	"strconv"
-
-	"github.com/absmach/supermq/pkg/errors"
-	kithttp "github.com/go-kit/kit/transport/http"
-)
-
-// LoggingErrorEncoder is a go-kit error encoder logging decorator.
-func LoggingErrorEncoder(logger *slog.Logger, enc kithttp.ErrorEncoder) kithttp.ErrorEncoder {
-	return func(ctx context.Context, err error, w http.ResponseWriter) {
-		if errors.Contains(err, ErrValidation) {
-			logger.Error(err.Error())
-		}
-		enc(ctx, err, w)
-	}
-}
-
-// ReadStringQuery reads the value of string http query parameters for a given key.
-func ReadStringQuery(r *http.Request, key, def string) (string, error) {
-	vals := r.URL.Query()[key]
-	if len(vals) > 1 {
-		return "", ErrInvalidQueryParams
-	}
-
-	if len(vals) == 0 {
-		return def, nil
-	}
-
-	return vals[0], nil
-}
-
-// ReadMetadataQuery reads the value of json http query parameters for a given key.
-func ReadMetadataQuery(r *http.Request, key string, def map[string]any) (map[string]any, error) {
-	vals := r.URL.Query()[key]
-	if len(vals) > 1 {
-		return nil, ErrInvalidQueryParams
-	}
-
-	if len(vals) == 0 {
-		return def, nil
-	}
-
-	m := make(map[string]any)
-	err := json.Unmarshal([]byte(vals[0]), &m)
-	if err != nil {
-		return nil, errors.Wrap(ErrInvalidQueryParams, err)
-	}
-
-	return m, nil
-}
-
-// ReadBoolQuery reads boolean query parameters in a given http request.
-func ReadBoolQuery(r *http.Request, key string, def bool) (bool, error) {
-	vals := r.URL.Query()[key]
-	if len(vals) > 1 {
-		return false, ErrInvalidQueryParams
-	}
-
-	if len(vals) == 0 {
-		return def, nil
-	}
-
-	b, err := strconv.ParseBool(vals[0])
-	if err != nil {
-		return false, errors.Wrap(ErrInvalidQueryParams, err)
-	}
-
-	return b, nil
-}
-
-type number interface {
-	int64 | float64 | uint16 | uint64
-}
-
-// ReadNumQuery returns a numeric value.
-func ReadNumQuery[N number](r *http.Request, key string, def N) (N, error) {
-	vals := r.URL.Query()[key]
-	if len(vals) > 1 {
-		return 0, ErrInvalidQueryParams
-	}
-	if len(vals) == 0 {
-		return def, nil
-	}
-	val := vals[0]
-
-	switch any(def).(type) {
-	case int64:
-		v, err := strconv.ParseInt(val, 10, 64)
-		if err != nil {
-			return 0, errors.Wrap(ErrInvalidQueryParams, err)
-		}
-		return N(v), nil
-	case uint64:
-		v, err := strconv.ParseUint(val, 10, 64)
-		if err != nil {
-			return 0, errors.Wrap(ErrInvalidQueryParams, err)
-		}
-		return N(v), nil
-	case uint16:
-		v, err := strconv.ParseUint(val, 10, 16)
-		if err != nil {
-			return 0, errors.Wrap(ErrInvalidQueryParams, err)
-		}
-		return N(v), nil
-	case float64:
-		v, err := strconv.ParseFloat(val, 64)
-		if err != nil {
-			return 0, errors.Wrap(ErrInvalidQueryParams, err)
-		}
-		return N(v), nil
-	default:
-		return def, nil
-	}
-}

api/http/util/transport_test.go

@@ -1,364 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package util_test
-
-import (
-	"context"
-	"fmt"
-	"net/http"
-	"net/http/httptest"
-	"net/url"
-	"testing"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	smqlog "github.com/absmach/supermq/logger"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/stretchr/testify/assert"
-)
-
-func TestReadStringQuery(t *testing.T) {
-	cases := []struct {
-		desc string
-		url  string
-		key  string
-		ret  string
-		err  error
-	}{
-		{
-			desc: "valid string query",
-			url:  "http://localhost:8080/?key=test",
-			key:  "key",
-			ret:  "test",
-			err:  nil,
-		},
-		{
-			desc: "empty string query",
-			url:  "http://localhost:8080/",
-			key:  "key",
-			ret:  "",
-			err:  nil,
-		},
-		{
-			desc: "multiple string query",
-			url:  "http://localhost:8080/?key=test&key=random",
-			key:  "key",
-			ret:  "",
-			err:  apiutil.ErrInvalidQueryParams,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			parsedURL, err := url.Parse(c.url)
-			assert.NoError(t, err)
-
-			r := &http.Request{URL: parsedURL}
-			ret, err := apiutil.ReadStringQuery(r, c.key, "")
-			assert.Equal(t, c.err, err)
-			assert.Equal(t, c.ret, ret)
-		})
-	}
-}
-
-func TestReadMetadataQuery(t *testing.T) {
-	cases := []struct {
-		desc string
-		url  string
-		key  string
-		ret  map[string]any
-		err  error
-	}{
-		{
-			desc: "valid metadata query",
-			url:  "http://localhost:8080/?key={\"test\":\"test\"}",
-			key:  "key",
-			ret:  map[string]any{"test": "test"},
-			err:  nil,
-		},
-		{
-			desc: "empty metadata query",
-			url:  "http://localhost:8080/",
-			key:  "key",
-			ret:  nil,
-			err:  nil,
-		},
-		{
-			desc: "multiple metadata query",
-			url:  "http://localhost:8080/?key={\"test\":\"test\"}&key={\"random\":\"random\"}",
-			key:  "key",
-			ret:  nil,
-			err:  apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc: "invalid metadata query",
-			url:  "http://localhost:8080/?key=abc",
-			key:  "key",
-			ret:  nil,
-			err:  apiutil.ErrInvalidQueryParams,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			parsedURL, err := url.Parse(c.url)
-			assert.NoError(t, err)
-
-			r := &http.Request{URL: parsedURL}
-			ret, err := apiutil.ReadMetadataQuery(r, c.key, nil)
-			assert.True(t, errors.Contains(err, c.err), fmt.Sprintf("expected: %v, got: %v", c.err, err))
-			assert.Equal(t, c.ret, ret)
-		})
-	}
-}
-
-func TestReadBoolQuery(t *testing.T) {
-	cases := []struct {
-		desc string
-		url  string
-		key  string
-		ret  bool
-		err  error
-	}{
-		{
-			desc: "valid bool query",
-			url:  "http://localhost:8080/?key=true",
-			key:  "key",
-			ret:  true,
-			err:  nil,
-		},
-		{
-			desc: "valid bool query",
-			url:  "http://localhost:8080/?key=false",
-			key:  "key",
-			ret:  false,
-			err:  nil,
-		},
-		{
-			desc: "invalid bool query",
-			url:  "http://localhost:8080/?key=abc",
-			key:  "key",
-			ret:  false,
-			err:  apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc: "empty bool query",
-			url:  "http://localhost:8080/",
-			key:  "key",
-			ret:  false,
-			err:  nil,
-		},
-		{
-			desc: "multiple bool query",
-			url:  "http://localhost:8080/?key=true&key=false",
-			key:  "key",
-			ret:  false,
-			err:  apiutil.ErrInvalidQueryParams,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			parsedURL, err := url.Parse(c.url)
-			assert.NoError(t, err)
-
-			r := &http.Request{URL: parsedURL}
-			ret, err := apiutil.ReadBoolQuery(r, c.key, false)
-			assert.True(t, errors.Contains(err, c.err), fmt.Sprintf("expected: %v, got: %v", c.err, err))
-			assert.Equal(t, c.ret, ret)
-		})
-	}
-}
-
-func TestReadNumQuery(t *testing.T) {
-	cases := []struct {
-		desc    string
-		url     string
-		key     string
-		numType string
-		ret     any
-		err     error
-	}{
-		{
-			desc:    "valid int64 query",
-			url:     "http://localhost:8080/?key=123",
-			key:     "key",
-			numType: "int64",
-			ret:     int64(123),
-			err:     nil,
-		},
-		{
-			desc:    "valid float64 query",
-			url:     "http://localhost:8080/?key=1.23",
-			key:     "key",
-			numType: "float64",
-			ret:     float64(1.23),
-			err:     nil,
-		},
-		{
-			desc:    "valid uint64 query",
-			url:     "http://localhost:8080/?key=123",
-			key:     "key",
-			numType: "uint64",
-			ret:     uint64(123),
-			err:     nil,
-		},
-		{
-			desc:    "valid uint16 query",
-			url:     "http://localhost:8080/?key=123",
-			key:     "key",
-			numType: "uint16",
-			ret:     uint16(123),
-			err:     nil,
-		},
-		{
-			desc:    "invalid int64 query",
-			url:     "http://localhost:8080/?key=abc",
-			key:     "key",
-			numType: "int64",
-			ret:     int64(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "invalid float64 query",
-			url:     "http://localhost:8080/?key=abc",
-			key:     "key",
-			numType: "float64",
-			ret:     float64(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "invalid uint64 query",
-			url:     "http://localhost:8080/?key=abc",
-			key:     "key",
-			numType: "uint64",
-			ret:     uint64(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "invalid uint16 query",
-			url:     "http://localhost:8080/?key=abc",
-			key:     "key",
-			numType: "uint16",
-			ret:     uint16(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "empty int64 query",
-			url:     "http://localhost:8080/",
-			key:     "key",
-			numType: "int64",
-			ret:     int64(0),
-			err:     nil,
-		},
-		{
-			desc:    "empty float64 query",
-			url:     "http://localhost:8080/",
-			key:     "key",
-			numType: "float64",
-			ret:     float64(0),
-			err:     nil,
-		},
-		{
-			desc:    "empty uint16 query",
-			url:     "http://localhost:8080/",
-			key:     "key",
-			numType: "uint16",
-			ret:     uint16(0),
-			err:     nil,
-		},
-		{
-			desc:    "empty uint64 query",
-			url:     "http://localhost:8080/",
-			key:     "key",
-			numType: "uint64",
-			ret:     uint64(0),
-			err:     nil,
-		},
-		{
-			desc:    "multiple int64 query",
-			url:     "http://localhost:8080/?key=123&key=456",
-			key:     "key",
-			numType: "int64",
-			ret:     int64(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "multiple float64 query",
-			url:     "http://localhost:8080/?key=1.23&key=4.56",
-			key:     "key",
-			numType: "float64",
-			ret:     float64(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "multiple uint16 query",
-			url:     "http://localhost:8080/?key=123&key=456",
-			key:     "key",
-			numType: "uint16",
-			ret:     uint16(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-		{
-			desc:    "multiple uint64 query",
-			url:     "http://localhost:8080/?key=123&key=456",
-			key:     "key",
-			numType: "uint64",
-			ret:     uint64(0),
-			err:     apiutil.ErrInvalidQueryParams,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			parsedURL, err := url.Parse(c.url)
-			assert.NoError(t, err)
-
-			r := &http.Request{URL: parsedURL}
-			var ret any
-			switch c.numType {
-			case "int64":
-				ret, err = apiutil.ReadNumQuery[int64](r, c.key, 0)
-			case "float64":
-				ret, err = apiutil.ReadNumQuery[float64](r, c.key, 0)
-			case "uint64":
-				ret, err = apiutil.ReadNumQuery[uint64](r, c.key, 0)
-			case "uint16":
-				ret, err = apiutil.ReadNumQuery[uint16](r, c.key, 0)
-			}
-			assert.True(t, errors.Contains(err, c.err), fmt.Sprintf("expected: %v, got: %v", c.err, err))
-			assert.Equal(t, c.ret, ret)
-		})
-	}
-}
-
-func TestLoggingErrorEncoder(t *testing.T) {
-	cases := []struct {
-		desc string
-		err  error
-	}{
-		{
-			desc: "error contains ErrValidation",
-			err:  errors.Wrap(apiutil.ErrValidation, svcerr.ErrAuthentication),
-		},
-		{
-			desc: "error does not contain ErrValidation",
-			err:  svcerr.ErrAuthentication,
-		},
-	}
-
-	for _, c := range cases {
-		t.Run(c.desc, func(t *testing.T) {
-			encCalled := false
-			encFunc := func(ctx context.Context, err error, w http.ResponseWriter) {
-				encCalled = true
-			}
-
-			errorEncoder := apiutil.LoggingErrorEncoder(smqlog.NewMock(), encFunc)
-			errorEncoder(context.Background(), c.err, httptest.NewRecorder())
-
-			assert.True(t, encCalled)
-		})
-	}
-}

apidocs/asyncapi/mqtt.yaml

@@ -1,119 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-asyncapi: '2.6.0'
-id: 'https://github.com/absmach/supermq/blob/main/api/asyncapi/mqtt.yaml'
-info:
-  title: SuperMQ MQTT Adapter
-  version: '0.18.0'
-  contact:
-    name: SuperMQ Team
-    url: 'https://github.com/absmach/supermq'
-    email: info@abstractmachines.fr
-  description: |
-    MQTT adapter provides an MQTT API for sending messages through the platform. MQTT adapter uses [mProxy](https://github.com/absmach/mproxy) for proxying traffic between client and MQTT broker.
-    Additionally, the MQTT adapter and the message broker are replicating the traffic between brokers.
-
-  license:
-    name: Apache 2.0
-    url: 'https://github.com/absmach/supermq/blob/main/LICENSE'
-
-
-defaultContentType: application/json
-
-servers:
-  dev:
-    url: localhost:{port}
-    protocol: mqtt
-    description: Test broker
-    variables:
-      port:
-        description: Secure connection (TLS) is available through port 8883.
-        default: '1883'
-        enum:
-          - '1883'
-          - '8883'
-    security:
-      - user-password: []
-
-channels:
-  /m/{domainPrefix}/c/{channelPrefix}/{subtopic}:
-    parameters:
-      domainPrefix:
-        $ref: '#/components/parameters/domainPrefix'
-        in: path
-        required: true
-      channelPrefix:
-        $ref: '#/components/parameters/channelPrefix'
-        in: path
-        required: true
-      subtopic:
-        $ref: '#/components/parameters/subtopic'
-        in: path
-        required: false
-
-    publish:
-      traits:
-        - $ref: '#/components/operationTraits/mqtt'
-      message:
-        $ref: '#/components/messages/jsonMsg'
-    subscribe:
-      traits:
-        - $ref: '#/components/operationTraits/mqtt'
-      message:
-        $ref: '#/components/messages/jsonMsg'
-
-components:
-  messages:
-    jsonMsg:
-      title: JSON Message
-      summary: Arbitrary JSON array or object.
-      contentType: application/json
-      payload:
-        $ref: "#/components/schemas/jsonMsg"
-
-  schemas:
-    jsonMsg:
-      type: object
-      description: Arbitrary JSON object or array. SenML format is recommended.
-      example: |
-        ### SenML
-        ```json
-        [{"bn":"some-base-name:","bt":1641646520, "bu":"A","bver":5, "n":"voltage","u":"V","v":120.1}, {"n":"current","t":-5,"v":1.2}, {"n":"current","t":-4,"v":1.3}]
-        ```
-        ### JSON
-        ```json
-        {"field_1":"val_1", "t": 1641646525}
-        ```
-        ### JSON Array
-        ```json
-        [{"field_1":"val_1", "t": 1641646520},{"field_2":"val_2", "t": 1641646522}]
-        ```
-
-  parameters:
-    domainPrefix:
-      description: ID or route of the domain associated with the channel and client.
-      schema:
-        type: string
-    channelPrefix:
-      description: ID or route of the channel connected to the Client ID defined in the username.
-      schema:
-        type: string
-    subtopic:
-      description: Arbitrary message subtopic.
-      schema:
-        type: string
-        default: ''
-
-  securitySchemes:
-    user-password:
-      type: userPassword
-      description: |
-        username is client ID connected to the channel defined in the mqtt topic and
-        password is client secret corresponding to the client ID
-
-  operationTraits:
-    mqtt:
-      bindings:
-        mqtt:
-          qos: 2

apidocs/asyncapi/websocket.yaml

@@ -1,151 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-asyncapi: 2.6.0
-id: 'https://github.com/absmach/supermq/blob/main/api/asyncapi/websocket.yaml'
-info:
-  title: SuperMQ WebSocket adapter
-  description: WebSocket adapter provides a WebSocket API for sending messages through communication channels. WebSocket adapter uses [mProxy](https://github.com/absmach/mproxy) for proxying traffic between client and MQTT broker.
-  version: '0.18.0'
-  contact:
-    name: SuperMQ Team
-    url: 'https://github.com/absmach/supermq'
-    email: info@abstractmachines.fr
-  license:
-    name: Apache 2.0
-    url: 'https://github.com/absmach/supermq/blob/main/LICENSE'
-tags:
-  - name: WebSocket
-defaultContentType: application/json
-
-servers:
-  dev:
-    url: 'ws://{host}:{port}'
-    protocol: ws
-    description: Default WebSocket Adapter URL
-    variables:
-      host:
-        description: Hostname of the WebSocket adapter
-        default: localhost
-      port:
-        description: SuperMQ WebSocket Adapter port
-        default: '8186'
-
-channels:
-  'm/{domainPrefix}/c/{channelPrefix}/{subtopic}':
-    parameters:
-      domainPrefix:
-        $ref: '#/components/parameters/domainPrefix'
-        in: path
-        required: true
-      channelPrefix:
-        $ref: '#/components/parameters/channelPrefix'
-        in: path
-        required: true
-      subtopic:
-        $ref: '#/components/parameters/subtopic'
-        in: path
-        required: false
-    publish:
-      summary: Publish messages to a channel
-      operationId: publishToChannel
-      message:
-        $ref: '#/components/messages/jsonMsg'
-        messageId: publishMessage
-      bindings:
-        ws:
-          method: POST
-          query:
-            subtopic: '{$request.query.subtopic}'
-      security:
-        - bearerAuth: []
-    subscribe:
-      summary: Subscribe to receive messages from a channel
-      operationId: subscribeToChannel
-      message:
-        $ref: '#/components/messages/jsonMsg'
-        messageId: subscribeMessage
-      bindings:
-        ws:
-          method: GET
-          query:
-            subtopic: '{$request.query.subtopic}'
-      security:
-        - bearerAuth: []
-  /version:
-    subscribe:
-      summary: Get the version of the SuperMQ adapter
-      operationId: getVersion
-      bindings:
-        http:
-          method: GET
-  metrics:
-    description: Endpoint for getting service metrics.
-    subscribe:
-      operationId: metrics
-      summary: Service metrics
-    bindings:
-      http:
-        type: request
-        method: GET
-
-components:
-  messages:
-    jsonMsg:
-      title: JSON Message
-      summary: Arbitrary JSON array or object.
-      contentType: application/json
-      payload:
-        $ref: '#/components/schemas/jsonMsg'
-  schemas:
-    jsonMsg:
-      type: object
-      description: Arbitrary JSON object or array. SenML format is recommended.
-      example: >
-        ### SenML
-
-        ```json
-
-        [{"bn":"some-base-name:","bt":1641646520, "bu":"A","bver":5,
-        "n":"voltage","u":"V","v":120.1}, {"n":"current","t":-5,"v":1.2},
-        {"n":"current","t":-4,"v":1.3}]
-
-        ```
-
-        ### JSON
-
-        ```json
-
-        {"field_1":"val_1", "t": 1641646525}
-
-        ```
-
-        ### JSON Array
-
-        ```json
-
-        [{"field_1":"val_1", "t": 1641646520},{"field_2":"val_2", "t":
-        1641646522}]
-
-        ```
-  parameters:
-    domainPrefix:
-      description: ID or route of the domain associated with the channel and client.
-      schema:
-        type: string
-    channelPrefix:
-      description: ID or route of the channel connected to the Client ID defined in the username.
-      schema:
-        type: string
-    subtopic:
-      description: Arbitrary message subtopic.
-      schema:
-        type: string
-        default: ''
-  securitySchemes:
-    bearerAuth:
-      type: http
-      scheme: bearer
-      bearerFormat: uuid
-      description: |
-        * Client access: "Authorization: Client <client_key>"

apidocs/openapi/README.md

@@ -1,5 +0,0 @@
-# SuperMQ OpenAPI Specification
-
-This folder contains an OpenAPI specifications for SuperMQ API.
-
-View specification in Swagger UI at [docs.api.supermq.abstractmachines.fr](https://docs.api.supermq.abstractmachines.fr)

apidocs/openapi/journal.yaml

@@ -1,426 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-openapi: 3.0.3
-info:
-  title: SuperMQ Journal Log Service
-  description: |
-    This is the Journal Log Server based on the OpenAPI 3.0 specification.  It is the HTTP API for viewing journal log history. You can now help us improve the API whether it's by making changes to the definition itself or to the code.
-    Some useful links:
-    - [The SuperMQ repository](https://github.com/absmach/supermq)
-  contact:
-    email: info@mainflux.com
-  license:
-    name: Apache 2.0
-    url: https://github.com/absmach/supermq/blob/main/LICENSE
-  version: 0.18.0
-
-servers:
-  - url: http://localhost:9021
-  - url: https://localhost:9021
-
-tags:
-  - name: journal-log
-    description: Everything about your Journal Log
-    externalDocs:
-      description: Find out more about Journal Log
-      url: http://docs.mainflux.io/
-
-paths:
-  /journal/user/{userID}:
-    get:
-      tags:
-        - journal-log
-      summary: List user journal log
-      description: |
-        Retrieves a list of journal. Due to performance concerns, data
-        is retrieved in subsets. The API must ensure that the entire
-        dataset is consumed either by making subsequent requests, or by
-        increasing the subset size of the initial request.
-      parameters:
-        - $ref: "#/components/parameters/user_id"
-        - $ref: "#/components/parameters/offset"
-        - $ref: "#/components/parameters/limit"
-        - $ref: "#/components/parameters/operation"
-        - $ref: "#/components/parameters/with_attributes"
-        - $ref: "#/components/parameters/with_metadata"
-        - $ref: "#/components/parameters/from"
-        - $ref: "#/components/parameters/to"
-        - $ref: "#/components/parameters/dir"
-      security:
-        - bearerAuth: []
-      responses:
-        "200":
-          $ref: "#/components/responses/JournalsPageRes"
-        "400":
-          description: Failed due to malformed query parameters.
-        "401":
-          description: Missing or invalid access token provided.
-        "403":
-          description: Failed to perform authorization over the entity.
-        "404":
-          description: A non-existent entity request.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-  /{domainID}/journal/client/{clientID}/telemetry:
-    get:
-      tags:
-        - journal-log
-      summary: View client telemetry
-      description: |
-        Retrieves telemetry data for a specific client within a domain.
-        This includes connection status, messages sent/received, and other metrics.
-      parameters:
-        - $ref: "#/components/parameters/domain_id"
-        - $ref: '#/components/parameters/client_id'
-      security:
-        - bearerAuth: []
-      responses:
-        "200":
-          description: Client telemetry data retrieved successfully
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/Telemetry"
-        "400":
-          description: Failed due to malformed request parameters.
-        "401":
-          description: Missing or invalid access token provided.
-        "403":
-          description: Failed to perform authorization over the entity.
-        "404":
-          description: Client not found.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-  /{domainID}/journal/{entityType}/{id}:
-    get:
-      tags:
-        - journal-log
-      summary: List entity journal log
-      description: |
-        Retrieves a list of journal. Due to performance concerns, data
-        is retrieved in subsets. The API must ensure that the entire
-        dataset is consumed either by making subsequent requests, or by
-        increasing the subset size of the initial request.
-      parameters:
-        - $ref: "#/components/parameters/domain_id"
-        - $ref: "#/components/parameters/entity_type"
-        - $ref: "#/components/parameters/id"
-        - $ref: "#/components/parameters/offset"
-        - $ref: "#/components/parameters/limit"
-        - $ref: "#/components/parameters/operation"
-        - $ref: "#/components/parameters/with_attributes"
-        - $ref: "#/components/parameters/with_metadata"
-        - $ref: "#/components/parameters/from"
-        - $ref: "#/components/parameters/to"
-        - $ref: "#/components/parameters/dir"
-      security:
-        - bearerAuth: []
-      responses:
-        "200":
-          $ref: "#/components/responses/JournalsPageRes"
-        "400":
-          description: Failed due to malformed query parameters.
-        "401":
-          description: Missing or invalid access token provided.
-        "403":
-          description: Failed to perform authorization over the entity.
-        "404":
-          description: A non-existent entity request.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-  /health:
-    get:
-      summary: Retrieves service health check info.
-      tags:
-        - health
-      security: []
-      responses:
-        "200":
-          $ref: "#/components/responses/HealthRes"
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-components:
-  schemas:
-    Telemetry:
-      type: object
-      properties:
-        client_id:
-          type: string
-          format: uuid
-          description: Unique identifier of the client
-          example: "bb7edb32-2eac-4aad-aebe-ed96fe073879"
-        domain_id:
-          type: string
-          format: uuid
-          description: Unique identifier of the domain
-          example: "29d425c8-542b-4614-8a4d-a5951945d720"
-        subscriptions:
-          type: integer
-          format: int64
-          description: Number of active subscriptions for the client
-          example: 5
-        inbound_messages:
-          type: integer
-          format: int64
-          description: Number of messages received by the client
-          example: 1234567
-        outbound_messages:
-          type: integer
-          format: int64
-          description: Number of messages sent by the client
-          example: 987654
-        first_seen:
-          type: string
-          format: date-time
-          description: Timestamp when the client was first seen
-          example: "2024-01-11T10:00:00.000Z"
-        last_seen:
-          type: string
-          format: date-time
-          description: Timestamp when the client was last seen
-          example: "2024-01-11T12:05:07.449053Z"
-
-    Journal:
-      type: object
-      properties:
-        operation:
-          type: string
-          example: user.create
-          description: Journal operation.
-        occurred_at:
-          type: string
-          format: date-time
-          example: "2024-01-11T12:05:07.449053Z"
-          description: Time when the journal occurred.
-        attributes:
-          type: object
-          description: Journal attributes.
-          example:
-            {
-              "created_at": "2024-06-12T11:34:32.991591Z",
-              "id": "29d425c8-542b-4614-8a4d-a5951945d720",
-              "identity": "Gawne-Havlicek@email.com",
-              "name": "Newgard-Frisina",
-              "status": "enabled",
-              "updated_at": "2024-06-12T11:34:33.116795Z",
-              "updated_by": "ad228f20-4741-47c5-bef7-d871b541c019",
-            }
-        metadata:
-          type: object
-          description: Journal payload.
-          example: { "Update": "Calvo-Felkins" }
-      xml:
-        name: journal
-
-    JournalPage:
-      type: object
-      properties:
-        journals:
-          type: array
-          minItems: 0
-          uniqueItems: true
-          items:
-            $ref: "#/components/schemas/Journal"
-        total:
-          type: integer
-          example: 1
-          description: Total number of items.
-        offset:
-          type: integer
-          description: Number of items to skip during retrieval.
-        limit:
-          type: integer
-          example: 10
-          description: Maximum number of items to return in one page.
-      required:
-        - journals
-        - total
-        - offset
-
-    Error:
-      type: object
-      properties:
-        error:
-          type: string
-          description: Error message
-      example: { "error": "malformed entity specification" }
-
-  parameters:
-    domain_id:
-      name: domainID
-      description: Unique identifier for a domain.
-      in: path
-      schema:
-        type: string
-        format: uuid
-      required: true
-      example: bb7edb32-2eac-4aad-aebe-ed96fe073879
-
-    client_id:
-      name: clientID
-      description: Unique identifier for a client
-      in: path
-      schema:
-        type: string
-        format: uuid
-      required: true
-      example: bb7edb32-2eac-4aad-aebe-ed96fe073879
-
-    entity_type:
-      name: entityType
-      description: Type of entity, e.g. group, client, channel.
-      in: path
-      schema:
-        type: string
-        enum:
-          - group
-          - client
-          - channel
-      required: true
-      example: group
-
-    user_id:
-      name: userID
-      description: Unique identifier for a user.
-      in: path
-      schema:
-        type: string
-        format: uuid
-      required: true
-      example: bb7edb32-2eac-4aad-aebe-ed96fe073879
-
-    id:
-      name: id
-      description: Unique identifier for an entity, e.g. group, channel or client. Used together with entity_type.
-      in: path
-      schema:
-        type: string
-        format: uuid
-      required: true
-      example: bb7edb32-2eac-4aad-aebe-ed96fe073879
-
-    offset:
-      name: offset
-      description: Number of items to skip during retrieval.
-      in: query
-      schema:
-        type: integer
-        default: 0
-        minimum: 0
-      required: false
-      example: "0"
-
-    limit:
-      name: limit
-      description: Size of the subset to retrieve.
-      in: query
-      schema:
-        type: integer
-        default: 10
-        maximum: 10
-        minimum: 1
-      required: false
-      example: "10"
-
-    operation:
-      name: operation
-      description: Journal operation.
-      in: query
-      schema:
-        type: string
-      required: false
-      example: user.create
-
-    with_attributes:
-      name: with_attributes
-      description: Include journal attributes.
-      in: query
-      schema:
-        type: boolean
-      required: false
-      example: true
-
-    with_metadata:
-      name: with_metadata
-      description: Include journal metadata.
-      in: query
-      schema:
-        type: boolean
-      required: false
-      example: true
-
-    from:
-      name: from
-      description: Start date in unix time.
-      in: query
-      schema:
-        type: string
-        format: int64
-      required: false
-      example: 1966777289
-
-    to:
-      name: to
-      description: End date in unix time.
-      in: query
-      schema:
-        type: string
-        format: int64
-      required: false
-      example: 1966777289
-
-    dir:
-      name: dir
-      description: Sort direction.
-      in: query
-      schema:
-        type: string
-        enum:
-          - asc
-          - desc
-      required: false
-      example: desc
-
-  responses:
-    JournalsPageRes:
-      description: Data retrieved.
-      content:
-        application/json:
-          schema:
-            $ref: "#/components/schemas/JournalPage"
-
-    HealthRes:
-      description: Service Health Check.
-      content:
-        application/health+json:
-          schema:
-            $ref: "./schemas/health_info.yaml"
-
-    ServiceError:
-      description: Unexpected server-side error occurred.
-      content:
-        application/json:
-          schema:
-            $ref: "#/components/schemas/Error"
-
-  securitySchemes:
-    bearerAuth:
-      type: http
-      scheme: bearer
-      bearerFormat: JWT
-      description: |
-        * User access: "Authorization: Bearer <user_access_token>"
-
-security:
-  - bearerAuth: []

apidocs/openapi/twins.yaml

@@ -1,431 +0,0 @@
-# Copyright (c) Abstract Machines
-# SPDX-License-Identifier: Apache-2.0
-
-openapi: 3.0.1
-info:
-  title: SuperMQ twins service
-  description: |
-    HTTP API for managing digital twins and their states.
-    Some useful links:
-    - [The SuperMQ repository](https://github.com/absmach/supermq)
-  contact:
-    email: info@abstractmachines.fr
-  license:
-    name: Apache 2.0
-    url: https://github.com/absmach/supermq/blob/main/LICENSE
-  version: 0.18.0
-
-servers:
-  - url: http://localhost:9018
-  - url: https://localhost:9018
-
-tags:
-  - name: twins
-    description: Everything about your Twins
-    externalDocs:
-      description: Find out more about twins
-      url: https://docs.supermq.abstractmachines.fr/
-
-paths:
-  /twins:
-    post:
-      operationId: createTwin
-      summary: Adds new twin
-      description: |
-        Adds new twin to the list of twins owned by user identified using
-        the provided access token.
-      tags:
-        - twins
-      requestBody:
-        $ref: "#/components/requestBodies/TwinReq"
-      responses:
-        "201":
-          $ref: "#/components/responses/TwinCreateRes"
-        "400":
-          description: Failed due to malformed JSON.
-        "401":
-          description: Missing or invalid access token provided.
-        "415":
-          description: Missing or invalid content type.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-    get:
-      operationId: getTwins
-      summary: Retrieves twins
-      description: |
-        Retrieves a list of twins. Due to performance concerns, data
-        is retrieved in subsets.
-      tags:
-        - twins
-      parameters:
-        - $ref: "#/components/parameters/Limit"
-        - $ref: "#/components/parameters/Offset"
-        - $ref: "#/components/parameters/Name"
-        - $ref: "#/components/parameters/Metadata"
-      responses:
-        "200":
-          $ref: "#/components/responses/TwinsPageRes"
-        "400":
-          description: Failed due to malformed query parameters.
-        "401":
-          description: Missing or invalid access token provided.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-  /twins/{twinID}:
-    get:
-      operationId: getTwin
-      summary: Retrieves twin info
-      tags:
-        - twins
-      parameters:
-        - $ref: "#/components/parameters/TwinID"
-      responses:
-        "200":
-          $ref: "#/components/responses/TwinRes"
-        "400":
-          description: Failed due to malformed twin's ID.
-        "401":
-          description: Missing or invalid access token provided.
-        "404":
-          description: Twin does not exist.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-    put:
-      operationId: updateTwin
-      summary: Updates twin info
-      description: |
-        Update is performed by replacing the current resource data with values
-        provided in a request payload. Note that the twin's ID cannot be changed.
-      tags:
-        - twins
-      parameters:
-        - $ref: "#/components/parameters/TwinID"
-      requestBody:
-        $ref: "#/components/requestBodies/TwinReq"
-      responses:
-        "200":
-          description: Twin updated.
-        "400":
-          description: Failed due to malformed twin's ID or malformed JSON.
-        "401":
-          description: Missing or invalid access token provided.
-        "404":
-          description: Twin does not exist.
-        "415":
-          description: Missing or invalid content type.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-    delete:
-      operationId: removeTwin
-      summary: Removes a twin
-      description: Removes a twin.
-      tags:
-        - twins
-      parameters:
-        - $ref: "#/components/parameters/TwinID"
-      responses:
-        "204":
-          description: Twin removed.
-        "400":
-          description: Failed due to malformed twin's ID.
-        "401":
-          description: Missing or invalid access token provided
-        "404":
-          description: Twin does not exist.
-        "415":
-          description: Missing or invalid content type.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-  /states/{twinID}:
-    get:
-      operationId: getStates
-      summary: Retrieves states of twin with id twinID
-      description: |
-        Retrieves a list of states. Due to performance concerns, data
-        is retrieved in subsets.
-      tags:
-        - states
-      parameters:
-        - $ref: "#/components/parameters/TwinID"
-        - $ref: "#/components/parameters/Limit"
-        - $ref: "#/components/parameters/Offset"
-      responses:
-        "200":
-          $ref: "#/components/responses/StatesPageRes"
-        "400":
-          description: Failed due to malformed query parameters.
-        "401":
-          description: Missing or invalid access token provided.
-        "404":
-          description: Twin does not exist.
-        "422":
-          description: Database can't process request.
-        "500":
-          $ref: "#/components/responses/ServiceError"
-  /health:
-    get:
-      summary: Retrieves service health check info.
-      tags:
-        - health
-      security: []
-      responses:
-        "200":
-          $ref: "#/components/responses/HealthRes"
-        "500":
-          $ref: "#/components/responses/ServiceError"
-
-components:
-  parameters:
-    Limit:
-      name: limit
-      description: Size of the subset to retrieve.
-      in: query
-      schema:
-        type: integer
-        default: 10
-        maximum: 100
-        minimum: 1
-      required: false
-    Offset:
-      name: offset
-      description: Number of items to skip during retrieval.
-      in: query
-      schema:
-        type: integer
-        default: 0
-        minimum: 0
-      required: false
-    Name:
-      name: name
-      description: Twin name
-      in: query
-      schema:
-        type: string
-      required: false
-    Metadata:
-      name: metadata
-      description: |
-        Metadata filter. Filtering is performed matching the parameter with
-        metadata on top level. Parameter is json.
-      in: query
-      schema:
-        type: string
-        minimum: 0
-      required: false
-    TwinID:
-      name: twinID
-      description: Unique twin identifier.
-      in: path
-      schema:
-        type: string
-        format: uuid
-        minimum: 1
-      required: true
-
-  schemas:
-    Attribute:
-      type: object
-      properties:
-        name:
-          type: string
-          description: Name of the attribute.
-        channel:
-          type: string
-          description: SuperMQ channel used by attribute.
-        subtopic:
-          type: string
-          description: Subtopic used by attribute.
-        persist_state:
-          type: boolean
-          description: Trigger state creation based on the attribute.
-    Definition:
-      type: object
-      properties:
-        delta:
-          type: number
-          description: Minimal time delay before new state creation.
-        attributes:
-          type: array
-          minItems: 0
-          items:
-            $ref: "#/components/schemas/Attribute"
-    TwinReqObj:
-      type: object
-      properties:
-        name:
-          type: string
-          description: Free-form twin name.
-        metadata:
-          type: object
-          description: Arbitrary, object-encoded twin's data.
-        definition:
-          $ref: "#/components/schemas/Definition"
-    TwinResObj:
-      type: object
-      properties:
-        owner:
-          type: string
-          description: Email address of SuperMQ user that owns twin.
-        id:
-          type: string
-          format: uuid
-          description: Unique twin identifier generated by the service.
-        name:
-          type: string
-          description: Free-form twin name.
-        revision:
-          type: number
-          description: Oridnal revision number of twin.
-        created:
-          type: string
-          format: date
-          description: Twin creation date and time.
-        updated:
-          type: string
-          format: date
-          description: Twin update date and time.
-        definitions:
-          type: array
-          minItems: 0
-          items:
-            $ref: "#/components/schemas/Definition"
-        metadata:
-          type: object
-          description: Arbitrary, object-encoded twin's data.
-    TwinsPage:
-      type: object
-      properties:
-        twins:
-          type: array
-          minItems: 0
-          items:
-            $ref: "#/components/schemas/TwinResObj"
-        total:
-          type: integer
-          description: Total number of items.
-        offset:
-          type: integer
-          description: Number of items to skip during retrieval.
-        limit:
-          type: integer
-          description: Maximum number of items to return in one page.
-      required:
-        - twins
-    State:
-      type: object
-      properties:
-        twin_id:
-          type: string
-          format: uuid
-          description: ID of twin state belongs to.
-        id:
-          type: number
-          description: State position in a time row of states.
-        created:
-          type: string
-          format: date
-          description: State creation date.
-        payload:
-          type: object
-          description: Object-encoded states's payload.
-    StatesPage:
-      type: object
-      properties:
-        states:
-          type: array
-          minItems: 0
-          items:
-            $ref: "#/components/schemas/State"
-        total:
-          type: integer
-          description: Total number of items.
-        offset:
-          type: integer
-          description: Number of items to skip during retrieval.
-        limit:
-          type: integer
-          description: Maximum number of items to return in one page.
-      required:
-        - states
-
-  requestBodies:
-    TwinReq:
-      description: JSON-formatted document describing the twin to create or update.
-      content:
-        application/json:
-          schema:
-            $ref: "#/components/schemas/TwinReqObj"
-      required: true
-
-  responses:
-    TwinCreateRes:
-      description: Created twin's relative URL (i.e. /twins/{twinID}).
-      headers:
-        Location:
-          content:
-            text/plain:
-              schema:
-                type: string
-    TwinRes:
-      description: Data retrieved.
-      content:
-        application/json:
-          schema:
-            $ref: "#/components/schemas/TwinResObj"
-      links:
-        update:
-          operationId: updateTwin
-          parameters:
-            twinID: $response.body#/id
-        delete:
-          operationId: removeTwin
-          parameters:
-            twinID: $response.body#/id
-        states:
-          operationId: getStates
-          parameters:
-            twinID: $response.body#/id
-    TwinsPageRes:
-      description: Data retrieved.
-      content:
-        application/json:
-          schema:
-            $ref: "#/components/schemas/TwinsPage"
-    StatesPageRes:
-      description: Data retrieved.
-      content:
-        application/json:
-          schema:
-            $ref: "#/components/schemas/StatesPage"
-    ServiceError:
-      description: Unexpected server-side error occurred.
-    HealthRes:
-      description: Service Health Check.
-      content:
-        application/health+json:
-          schema:
-            $ref: "./schemas/health_info.yaml"
-
-  securitySchemes:
-    bearerAuth:
-      type: http
-      scheme: bearer
-      bearerFormat: JWT
-      description: |
-        * Users access: "Authorization: Bearer <user_token>"
-
-security:
-  - bearerAuth: []

auth.yaml

@@ -3,16 +3,16 @@
 
 openapi: 3.0.3
 info:
-  title: SuperMQ Auth Service
+  title: Magistrala Auth Service
   description: |
     This is the Auth Server based on the OpenAPI 3.0 specification.  It is the HTTP API for managing platform users. You can now help us improve the API whether it's by making changes to the definition itself or to the code.
     Some useful links:
-    - [The SuperMQ repository](https://github.com/absmach/supermq)
+    - [The Magistrala repository](https://github.com/absmach/magistrala)
   contact:
-    email: info@abstractmachines.fr
+    email: info@absmach.eu
   license:
     name: Apache 2.0
-    url: https://github.com/absmach/supermq/blob/main/LICENSE
+    url: https://github.com/absmach/magistrala/blob/main/LICENSE
   version: 0.18.0
 
 servers:
@@ -24,17 +24,17 @@ tags:
     description: Everything about your Keys.
     externalDocs:
       description: Find out more about keys
-      url: https://docs.supermq.abstractmachines.fr/
+      url: https://magistrala.absmach.eu/docs/
   - name: PATs
     description: Everything about your Personal Access Tokens.
     externalDocs:
       description: Find out more about Personal Access Tokens
-      url: https://docs.supermq.abstractmachines.fr/
+      url: https://magistrala.absmach.eu/docs/
   - name: Health
     description: Service health check endpoint.
     externalDocs:
       description: Find out more about health check
-      url: https://docs.supermq.abstractmachines.fr/
+      url: https://magistrala.absmach.eu/docs/
 
 paths:
   /keys:
@@ -81,6 +81,8 @@ paths:
           description: Missing or invalid access token provided.
         "404":
           description: A non-existent entity request.
+        "422":
+          description: Service can't process request.
         "500":
           $ref: "#/components/responses/ServiceError"
 
@@ -100,6 +102,8 @@ paths:
           description: Missing or invalid access token provided.
         "404":
           description: A non-existent entity request.
+        "422":
+          description: Service can't process request.
         "500":
           $ref: "#/components/responses/ServiceError"
 
@@ -124,7 +128,7 @@ paths:
           description: Missing or invalid content type.
         "500":
           $ref: "#/components/responses/ServiceError"
-    
+
     get:
       operationId: listPATs
       tags:
@@ -144,7 +148,7 @@ paths:
           description: Missing or invalid access token provided.
         "500":
           $ref: "#/components/responses/ServiceError"
-    
+
     delete:
       operationId: clearAllPATs
       tags:
@@ -159,7 +163,7 @@ paths:
           description: Missing or invalid access token provided.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}:
     get:
       operationId: retrievePAT
@@ -181,7 +185,7 @@ paths:
           description: PAT not found.
         "500":
           $ref: "#/components/responses/ServiceError"
-    
+
     delete:
       operationId: deletePAT
       tags:
@@ -200,7 +204,7 @@ paths:
           description: PAT not found.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/name:
     patch:
       operationId: updatePATName
@@ -226,7 +230,7 @@ paths:
           description: Missing or invalid content type.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/description:
     patch:
       operationId: updatePATDescription
@@ -252,7 +256,7 @@ paths:
           description: Missing or invalid content type.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/secret/reset:
     patch:
       operationId: resetPATSecret
@@ -278,7 +282,7 @@ paths:
           description: Missing or invalid content type.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/secret/revoke:
     patch:
       operationId: revokePATSecret
@@ -298,7 +302,7 @@ paths:
           description: PAT not found.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/scope:
     get:
       operationId: listScopes
@@ -322,7 +326,7 @@ paths:
           description: PAT not found.
         "500":
           $ref: "#/components/responses/ServiceError"
-    
+
     delete:
       operationId: clearAllScopes
       tags:
@@ -341,7 +345,7 @@ paths:
           description: PAT not found.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/scope/add:
     patch:
       operationId: addScope
@@ -369,7 +373,7 @@ paths:
           description: Database cannot process the request.
         "500":
           $ref: "#/components/responses/ServiceError"
-  
+
   /pats/{patID}/scope/remove:
     patch:
       operationId: removeScope
@@ -396,7 +400,6 @@ paths:
         "500":
           $ref: "#/components/responses/ServiceError"
 
-
   /health:
     get:
       summary: Retrieves service health check info.
@@ -465,7 +468,7 @@ components:
           format: date-time
           example: "2019-11-26T13:31:52Z"
           description: Time when the PAT was revoked
-    
+
     PATsPage:
       type: object
       properties:
@@ -486,20 +489,10 @@ components:
           items:
             $ref: "#/components/schemas/PAT"
           description: List of Personal Access Tokens
-    
+
     Scope:
       type: object
       properties:
-        id:
-          type: string
-          format: uuid
-          example: "c5747f2f-2a7c-4fe1-b41a-51a5ae290945"
-          description: Scope unique identifier
-        pat_id:
-          type: string
-          format: uuid
-          example: "9118de62-c680-46b7-ad0a-21748a52833a"
-          description: PAT ID this scope belongs to
         optional_domain_id:
           type: string
           format: uuid
@@ -507,7 +500,8 @@ components:
           description: Optional domain ID for the scope
         entity_type:
           type: string
-          enum: [groups, channels, clients, domains, users, dashboards, messages]
+          enum:
+            [groups, channels, clients, domains, users, dashboards, messages]
           example: "groups"
           description: Type of entity the scope applies to
         entity_id:
@@ -516,10 +510,21 @@ components:
           description: ID of the entity the scope applies to. '*' means all entities of the specified type.
         operation:
           type: string
-          enum: [create, read, list, update, delete, share, unshare, publish, subscribe]
+          enum:
+            [
+              create,
+              read,
+              list,
+              update,
+              delete,
+              share,
+              unshare,
+              publish,
+              subscribe,
+            ]
           example: "read"
           description: Operation allowed by this scope
-    
+
     ScopesPage:
       type: object
       properties:
@@ -679,9 +684,11 @@ components:
             type: object
             required:
               - name
+              - duration
             properties:
               name:
                 type: string
+                minLength: 1
                 example: "My PAT"
                 description: Name of the Personal Access Token
               description:
@@ -690,9 +697,10 @@ components:
                 description: Description of the Personal Access Token
               duration:
                 type: string
+                pattern: "^[0-9]+(ns|us|µs|ms|s|m|h|d|w|y)$"
                 example: "30d"
                 description: Duration for which the PAT is valid. Format is a duration string (e.g. "30d", "24h", "1y").
-    
+
     UpdatePATNameRequest:
       description: JSON-formatted document describing PAT name update request.
       required: true
@@ -707,7 +715,7 @@ components:
                 type: string
                 example: "New PAT Name"
                 description: New name for the Personal Access Token
-    
+
     UpdatePATDescriptionRequest:
       description: JSON-formatted document describing PAT description update request.
       required: true
@@ -722,7 +730,7 @@ components:
                 type: string
                 example: "New PAT Description"
                 description: New description for the Personal Access Token
-    
+
     ResetPATSecretRequest:
       description: JSON-formatted document describing PAT secret reset request.
       required: true
@@ -730,12 +738,15 @@ components:
         application/json:
           schema:
             type: object
+            required:
+              - duration
             properties:
               duration:
                 type: string
+                pattern: "^[0-9]+(ns|us|µs|ms|s|m|h|d|w|y)$"
                 example: "30d"
                 description: Duration for which the new PAT secret is valid. Format is a duration string (e.g. "30d", "24h", "1y").
-    
+
     AddScopeRequest:
       description: JSON-formatted document describing add scope request.
       required: true
@@ -751,7 +762,7 @@ components:
                 items:
                   $ref: "#/components/schemas/Scope"
                 description: List of scopes to add
-    
+
     RemoveScopeRequest:
       description: JSON-formatted document describing remove scope request.
       required: true
@@ -793,14 +804,14 @@ components:
         application/json:
           schema:
             $ref: "#/components/schemas/PAT"
-    
+
     PATsPageRes:
       description: Page of Personal Access Tokens.
       content:
         application/json:
           schema:
             $ref: "#/components/schemas/PATsPage"
-    
+
     ScopesPageRes:
       description: Page of scopes.
       content:

auth/README.md

@@ -1,449 +0,0 @@
-# Auth - Authentication and Authorization service
-
-Auth service provides authentication features as an API for managing authentication keys as well as administering groups of entities - `clients` and `users`.
-
-## Authentication
-
-User service is using Auth service gRPC API to obtain login token or password reset token. Authentication key consists of the following fields:
-
-- ID - key ID
-- Type - one of the three types described below
-- IssuerID - an ID of the SuperMQ User who issued the key
-- Subject - user ID for which the key is issued
-- IssuedAt - the timestamp when the key is issued
-- ExpiresAt - the timestamp after which the key is invalid
-
-There are four types of authentication keys:
-
-- Access key - keys issued to the user upon login request
-- Refresh key - keys used to generate new access keys
-- Recovery key - password recovery key
-- API key - keys issued upon the user request
-- Invitation key - keys used to invite new users
-
-Authentication keys are represented and distributed by the corresponding [JWT](jwt.io).
-
-User keys are issued when user logs in. Each user request (other than `registration` and `login`) contains user key that is used to authenticate the user.
-
-API keys are similar to the User keys. The main difference is that API keys have configurable expiration time. If no time is set, the key will never expire. For that reason, API keys are _the only key type that can be revoked_. This also means that, despite being used as a JWT, it requires a query to the database to validate the API key. The user with API key can perform all the same actions as the user with login key (can act on behalf of the user for Client, Channel, or user profile management), _except issuing new API keys_.
-
-Recovery key is the password recovery key. It's short-lived token used for password recovery process.
-
-For in-depth explanation of the aforementioned scenarios, as well as thorough understanding of SuperMQ, please check out the [official documentation][doc].
-
-The following actions are supported:
-
-- create (all key types)
-- verify (all key types)
-- obtain (API keys only)
-- revoke (API keys only)
-
-## Domains
-
-Domains are used to group users and clients. Each domain has a unique route that is associated with the domain. Domains are used to group users and their entities.
-
-Domain consists of the following fields:
-
-- ID - UUID uniquely representing domain
-- Name - name of the domain
-- Tags - array of tags
-- Metadata - Arbitrary, object-encoded domain's data
-- Route - unique route of the domain used in messaging
-- CreatedAt - timestamp at which the domain is created
-- UpdatedAt - timestamp at which the domain is updated
-- UpdatedBy - user that updated the domain
-- CreatedBy - user that created the domain
-- Status - domain status
-
-## Configuration
-
-The service is configured using the environment variables presented in the following table. Note that any unset variables will be replaced with their default values.
-
-| Variable                            | Description                                                                          | Default                        |
-| ----------------------------------- | ------------------------------------------------------------------------------------ | ------------------------------ |
-| SMQ_AUTH_LOG_LEVEL                  | Log level for the Auth service (debug, info, warn, error)                            | info                           |
-| SMQ_AUTH_DB_HOST                    | Database host address                                                                | localhost                      |
-| SMQ_AUTH_DB_PORT                    | Database host port                                                                   | 5432                           |
-| SMQ_AUTH_DB_USER                    | Database user                                                                        | supermq                        |
-| SMQ_AUTH_DB_PASSWORD                | Database password                                                                    | supermq                        |
-| SMQ_AUTH_DB_NAME                    | Name of the database used by the service                                             | auth                           |
-| SMQ_AUTH_DB_SSL_MODE                | Database connection SSL mode (disable, require, verify-ca, verify-full)              | disable                        |
-| SMQ_AUTH_DB_SSL_CERT                | Path to the PEM encoded certificate file                                             | ""                             |
-| SMQ_AUTH_DB_SSL_KEY                 | Path to the PEM encoded key file                                                     | ""                             |
-| SMQ_AUTH_DB_SSL_ROOT_CERT           | Path to the PEM encoded root certificate file                                        | ""                             |
-| SMQ_AUTH_HTTP_HOST                  | Auth service HTTP host                                                               | ""                             |
-| SMQ_AUTH_HTTP_PORT                  | Auth service HTTP port                                                               | 8189                           |
-| SMQ_AUTH_HTTP_SERVER_CERT           | Path to the PEM encoded HTTP server certificate file                                 | ""                             |
-| SMQ_AUTH_HTTP_SERVER_KEY            | Path to the PEM encoded HTTP server key file                                         | ""                             |
-| SMQ_AUTH_GRPC_HOST                  | Auth service gRPC host                                                               | ""                             |
-| SMQ_AUTH_GRPC_PORT                  | Auth service gRPC port                                                               | 8181                           |
-| SMQ_AUTH_GRPC_SERVER_CERT           | Path to the PEM encoded gRPC server certificate file                                 | ""                             |
-| SMQ_AUTH_GRPC_SERVER_KEY            | Path to the PEM encoded gRPC server key file                                         | ""                             |
-| SMQ_AUTH_GRPC_SERVER_CA_CERTS       | Path to the PEM encoded gRPC server CA certificate file                              | ""                             |
-| SMQ_AUTH_GRPC_CLIENT_CA_CERTS       | Path to the PEM encoded gRPC client CA certificate file                              | ""                             |
-| SMQ_AUTH_SECRET_KEY                 | String used for signing tokens                                                       | secret                         |
-| SMQ_AUTH_ACCESS_TOKEN_DURATION      | The access token expiration period                                                   | 1h                             |
-| SMQ_AUTH_REFRESH_TOKEN_DURATION     | The refresh token expiration period                                                  | 24h                            |
-| SMQ_AUTH_INVITATION_DURATION        | The invitation token expiration period                                               | 168h                           |
-| SMQ_AUTH_CACHE_URL                  | Redis URL for caching PAT scopes                                                     | redis://localhost:6379/0       |
-| SMQ_AUTH_CACHE_KEY_DURATION         | Duration for which PAT scope cache keys are valid                                    | 10m                            |
-| SMQ_SPICEDB_HOST                    | SpiceDB host address                                                                 | localhost                      |
-| SMQ_SPICEDB_PORT                    | SpiceDB host port                                                                    | 50051                          |
-| SMQ_SPICEDB_PRE_SHARED_KEY          | SpiceDB pre-shared key                                                               | 12345678                       |
-| SMQ_SPICEDB_SCHEMA_FILE             | Path to SpiceDB schema file                                                          | ./docker/spicedb/schema.zed    |
-| SMQ_JAEGER_URL                      | Jaeger server URL                                                                    | <http://jaeger:4318/v1/traces> |
-| SMQ_JAEGER_TRACE_RATIO              | Jaeger sampling ratio                                                                | 1.0                            |
-| SMQ_SEND_TELEMETRY                  | Send telemetry to supermq call home server                                           | true                           |
-| SMQ_ADAPTER_INSTANCE_ID        | Adapter instance ID                                                                  | ""                             |
-| SMQ_CALLOUT_URLS               | Comma-separated list of callout URLs                                                 | ""                             |
-| SMQ_CALLOUT_METHOD             | Callout method                                                                       | POST                           |
-| SMQ_CALLOUT_TLS_VERIFICATION   | Enable TLS verification for callouts                                                 | true                           |
-| SMQ_CALLOUT_TIMEOUT            | Callout timeout                                                                      | 10s                            |
-| SMQ_CALLOUT_CA_CERT            | Path to CA certificate file                                                          | ""                             |
-| SMQ_CALLOUT_CERT               | Path to client certificate file                                                      | ""                             |
-| SMQ_CALLOUT_KEY                | Path to client key file                                                              | ""                             |
-| SMQ_CALLOUT_OPERATIONS | Invoke callout if the authorization permission matches any of the given permissions. | ""                             |
-
-## Deployment
-
-The service itself is distributed as Docker container. Check the [`auth`](https://github.com/absmach/supermq/blob/main/docker/docker-compose.yaml) service section in docker-compose file to see how service is deployed.
-
-Running this service outside of container requires working instance of the postgres database, SpiceDB, and Jaeger server.
-To start the service outside of the container, execute the following shell script:
-
-```bash
-# download the latest version of the service
-git clone https://github.com/absmach/supermq
-
-cd supermq
-
-# compile the service
-make auth
-
-# copy binary to bin
-make install
-
-# set the environment variables and run the service
-SMQ_AUTH_LOG_LEVEL=info \
-SMQ_AUTH_DB_HOST=localhost \
-SMQ_AUTH_DB_PORT=5432 \
-SMQ_AUTH_DB_USER=supermq \
-SMQ_AUTH_DB_PASSWORD=supermq \
-SMQ_AUTH_DB_NAME=auth \
-SMQ_AUTH_DB_SSL_MODE=disable \
-SMQ_AUTH_DB_SSL_CERT="" \
-SMQ_AUTH_DB_SSL_KEY="" \
-SMQ_AUTH_DB_SSL_ROOT_CERT="" \
-SMQ_AUTH_HTTP_HOST=localhost \
-SMQ_AUTH_HTTP_PORT=8189 \
-SMQ_AUTH_HTTP_SERVER_CERT="" \
-SMQ_AUTH_HTTP_SERVER_KEY="" \
-SMQ_AUTH_GRPC_HOST=localhost \
-SMQ_AUTH_GRPC_PORT=8181 \
-SMQ_AUTH_GRPC_SERVER_CERT="" \
-SMQ_AUTH_GRPC_SERVER_KEY="" \
-SMQ_AUTH_GRPC_SERVER_CA_CERTS="" \
-SMQ_AUTH_GRPC_CLIENT_CA_CERTS="" \
-SMQ_AUTH_SECRET_KEY=secret \
-SMQ_AUTH_ACCESS_TOKEN_DURATION=1h \
-SMQ_AUTH_REFRESH_TOKEN_DURATION=24h \
-SMQ_AUTH_INVITATION_DURATION=168h \
-SMQ_SPICEDB_HOST=localhost \
-SMQ_SPICEDB_PORT=50051 \
-SMQ_SPICEDB_PRE_SHARED_KEY=12345678 \
-SMQ_SPICEDB_SCHEMA_FILE=./docker/spicedb/schema.zed \
-SMQ_JAEGER_URL=http://localhost:14268/api/traces \
-SMQ_JAEGER_TRACE_RATIO=1.0 \
-SMQ_SEND_TELEMETRY=true \
-SMQ_AUTH_ADAPTER_INSTANCE_ID="" \
-SMQ_CALLOUT_URLS="" \
-SMQ_CALLOUT_METHOD="POST" \
-SMQ_CALLOUT_TLS_VERIFICATION=true \
-$GOBIN/supermq-auth
-```
-
-Setting `SMQ_AUTH_HTTP_SERVER_CERT` and `SMQ_AUTH_HTTP_SERVER_KEY` will enable TLS against the service. The service expects a file in PEM format for both the certificate and the key.
-Setting `SMQ_AUTH_GRPC_SERVER_CERT` and `SMQ_AUTH_GRPC_SERVER_KEY` will enable TLS against the service. The service expects a file in PEM format for both the certificate and the key. Setting `SMQ_AUTH_GRPC_SERVER_CA_CERTS` will enable TLS against the service trusting only those CAs that are provided. The service expects a file in PEM format of trusted CAs. Setting `SMQ_AUTH_GRPC_CLIENT_CA_CERTS` will enable TLS against the service trusting only those CAs that are provided. The service expects a file in PEM format of trusted CAs.
-
-## Personal Access Tokens (PATs)
-
-Personal Access Tokens (PATs) provide a secure way to authenticate with SuperMQ APIs without using your primary credentials. They are particularly useful for automation, CI/CD pipelines, and integrating with third-party services.
-
-### Overview
-
-PATs in SuperMQ are designed with the following features:
-
-- **Scoped Access**: Each token can be limited to specific operations on specific resources
-- **Expiration Control**: Set custom expiration times for tokens
-- **Revocable**: Tokens can be revoked at any time
-- **Auditable**: Track when tokens were last used
-- **Secure**: Tokens are stored as hashes, not in plaintext
-
-### Token Structure
-
-A PAT consists of three parts separated by underscores:
-
-```
-pat_<encoded-user-and-pat-id>_<random-string>
-```
-
-Where:
-
-- `pat` is a fixed prefix
-- `<encoded-user-and-pat-id>` is a base64-encoded combination of the user ID and PAT ID
-- `<random-string>` is a randomly generated string for additional security
-
-### PAT Operations
-
-SuperMQ supports the following operations for PATs:
-
-| Operation   | Description                          |
-| ----------- | ------------------------------------ |
-| `create`    | Create a new resource                |
-| `read`      | Read/view a resource                 |
-| `list`      | List resources                       |
-| `update`    | Update/modify a resource             |
-| `delete`    | Delete a resource                    |
-| `share`     | Share a resource with others         |
-| `unshare`   | Remove sharing permissions           |
-| `publish`   | Publish messages to a channel        |
-| `subscribe` | Subscribe to messages from a channel |
-
-### Entity Types
-
-PATs can be scoped to the following entity types:
-
-| Entity Type  | Description            |
-| ------------ | ---------------------- |
-| `groups`     | User groups            |
-| `channels`   | Communication channels |
-| `clients`    | Client applications    |
-| `domains`    | Organizational domains |
-| `users`      | User accounts          |
-| `dashboards` | Dashboard interfaces   |
-| `messages`   | Message content        |
-
-### API Examples
-
-#### Creating a PAT
-
-```bash
-curl --location 'http://localhost:9001/pats' \
---header 'Content-Type: application/json' \
---header 'Authorization: Bearer <access_token>' \
---data '{
-    "name": "test pat",
-    "description": "testing pat",
-    "duration": "24h"
-}'
-```
-
-Response:
-
-```json
-{
-  "id": "a2500226-95dc-4285-87e2-e693e4a0a976",
-  "user_id": "user123",
-  "name": "pat 1",
-  "description": "for creating any client or channel",
-  "secret": "pat_dXNlcjEyM19hMjUwMDIyNi05NWRjLTQyODUtODdlMi1lNjkzZTRhMGE5NzY=_randomstring...",
-  "issued_at": "2025-02-27T11:20:59Z",
-  "expires_at": "2025-02-28T11:20:59Z"
-}
-```
-
-#### Adding Scopes to a PAT
-
-```bash
-curl --location --request PATCH 'http://localhost:9001/pats/a2500226-95dc-4285-87e2-e693e4a0a976/scope/add' \
---header 'Content-Type: application/json' \
---header 'Authorization: Bearer <access_token>' \
---data '{
-    "scopes": [
-        {
-            "optional_domain_id": "c16c980a-9d4c-4793-8fb2-c81304cf1d9f",
-            "entity_type": "clients",
-            "operation": "create",
-            "entity_id": "*"
-        },
-        {
-            "optional_domain_id": "c16c980a-9d4c-4793-8fb2-c81304cf1d9f",
-            "entity_type": "channels",
-            "operation": "create",
-            "entity_id": "cfbc6936-5748-4339-a8ef-37b64b02bc96"
-        },
-        {
-            "entity_type": "dashboards",
-            "optional_domain_id": "c16c980a-9d4c-4793-8fb2-c81304cf1d9f",
-            "operation": "read",
-            "entity_id": "*"
-        }
-    ]
-}'
-```
-
-#### Listing PATs
-
-```bash
-curl --location 'http://localhost:9001/pats' \
---header 'Authorization: Bearer <access_token>'
-```
-
-#### Listing Scopes for a PAT
-
-```bash
-curl --location 'http://localhost:9001/pats/a2500226-95dc-4285-87e2-e693e4a0a976/scopes' \
---header 'Authorization: Bearer <access_token>'
-```
-
-#### Revoking a PAT
-
-```bash
-curl --location --request PATCH 'http://localhost:9001/pats/a2500226-95dc-4285-87e2-e693e4a0a976/revoke' \
---header 'Authorization: Bearer <access_token>'
-```
-
-#### Resetting a PAT Secret
-
-```bash
-curl --location --request PATCH 'http://localhost:9001/pats/a2500226-95dc-4285-87e2-e693e4a0a976/reset' \
---header 'Content-Type: application/json' \
---header 'Authorization: Bearer <access_token>' \
---data '{
-    "duration": "720h"
-}'
-```
-
-### Using PATs for Authentication
-
-When making API requests, include the PAT in the Authorization header:
-
-```
-Authorization: Bearer pat_<encoded-user-and-pat-id>_<random-string>
-```
-
-#### Example: Creating a Client Using PAT
-
-```bash
-curl --location 'http://localhost:9006/c16c980a-9d4c-4793-8fb2-c81304cf1d9f/clients' \
---header 'accept: application/json' \
---header 'Content-Type: application/json' \
---header 'Authorization: Bearer pat_etKoiXKTR6a0zdgsBHC00qJQAiaV3EKFh+Lmk+SgqXY=_u7@5fyjgti9V@#Bw^bS*SPmX3OnH=HTvKwmIbxIuyBjoI|6FASo9egjKD^u-M$b|2Dpt3CXZtv&4k+hmYYjk&C$57AV59P%-iDV0' \
---data '{
-  "name": "test client",
-  "tags": [
-    "tag1",
-    "tag2"
-  ],
-  "metadata":{"units":"km"},
-  "status": "enabled"
-}'
-```
-
-This example shows how to create a client in a specific domain (`c16c980a-9d4c-4793-8fb2-c81304cf1d9f`) using a PAT for authentication. The PAT must have the appropriate scope (e.g., `clients` entity type with `create` operation) for this domain.
-
-### Wildcard Entity IDs
-
-When defining scopes for PATs, you can use the wildcard character `*` for the `entity_id` field to grant permissions for all entities of a specific type. This is particularly useful for automation tasks that need to operate on multiple resources.
-
-For example:
-
-- `"entity_id": "*"` - Grants permission for all entities of the specified type
-- `"entity_id": "specific-id"` - Grants permission only for the entity with the specified ID
-
-Using wildcards should be done carefully, as they grant broader permissions. Always follow the principle of least privilege by granting only the permissions necessary for the intended use case.
-
-### Scope Examples
-
-#### Allow Creating Any Client in a Domain
-
-```json
-{
-  "optional_domain_id": "domain_id",
-  "entity_type": "clients",
-  "operation": "create",
-  "entity_id": "*"
-}
-```
-
-This scope allows the PAT to create any client within the specified domain. The wildcard `*` for `entity_id` means the token can create any client, not just a specific one.
-
-#### Allow Publishing to a Specific Channel
-
-```json
-{
-  "optional_domain_id": "domain_id",
-  "entity_type": "channels",
-  "operation": "publish",
-  "entity_id": "channel_id"
-}
-```
-
-This scope restricts the PAT to only publish to a specific channel (`channel_id`) within the specified domain. No wildcard is used, so the permission is limited to just this one channel.
-
-#### Allow Reading All Dashboards
-
-```json
-{
-  "optional_domain_id": "domain_id",
-  "entity_type": "dashboards",
-  "operation": "read",
-  "entity_id": "*"
-}
-```
-
-This scope allows the PAT to read all dashboards within the specified domain. The wildcard `*` for `entity_id` means the token can read any dashboard in that domain.
-
-### Best Practices
-
-1. **Limit Scope**: Always use the principle of least privilege when creating PATs
-2. **Set Expirations**: Use reasonable expiration times for tokens
-3. **Rotate Regularly**: Reset token secrets periodically
-4. **Audit Usage**: Monitor when tokens are used
-5. **Revoke Unused**: Remove tokens that are no longer needed
-
-### Implementation Details
-
-PATs are stored in the database with the following schema:
-
-```sql
-CREATE TABLE IF NOT EXISTS pats (
-    id              VARCHAR(36) PRIMARY KEY,
-    name            VARCHAR(254) NOT NULL,
-    user_id         VARCHAR(36),
-    description     TEXT,
-    secret          TEXT,
-    issued_at       TIMESTAMPTZ,
-    expires_at      TIMESTAMPTZ,
-    updated_at      TIMESTAMPTZ,
-    revoked         BOOLEAN,
-    revoked_at      TIMESTAMPTZ,
-    last_used_at    TIMESTAMPTZ,
-    UNIQUE          (id, name, secret)
-)
-
-CREATE TABLE IF NOT EXISTS pat_scopes (
-    id                  VARCHAR(36) PRIMARY KEY,
-    pat_id              VARCHAR(36) REFERENCES pats(id) ON DELETE CASCADE,
-    optional_domain_id  VARCHAR(36),
-    entity_type         VARCHAR(50) NOT NULL,
-    operation           VARCHAR(50) NOT NULL,
-    entity_id           VARCHAR(50) NOT NULL,
-    UNIQUE (pat_id, optional_domain_id, entity_type, operation, entity_id)
-)
-```
-
-### Authorization
-
-When a PAT is used for authentication:
-
-1. The system parses the token to extract the user ID and PAT ID
-2. It verifies the token hasn't been revoked or expired
-3. It checks if the requested operation is allowed by the token's scopes
-4. If all checks pass, the operation is authorized
-
-## Usage
-
-For more information about service capabilities and its usage, please check out the [API documentation](https://docs.api.supermq.abstractmachines.fr/?urls.primaryName=auth.yaml).
-
-[doc]: https://docs.supermq.abstractmachines.fr

auth/api/doc.go

@@ -1,5 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package api contains implementation of Auth service HTTP API.
-package api

auth/api/grpc/auth/client.go

@@ -1,179 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-import (
-	"context"
-	"time"
-
-	grpcAuthV1 "github.com/absmach/supermq/api/grpc/auth/v1"
-	"github.com/absmach/supermq/auth"
-	grpcapi "github.com/absmach/supermq/auth/api/grpc"
-	"github.com/go-kit/kit/endpoint"
-	kitgrpc "github.com/go-kit/kit/transport/grpc"
-	"google.golang.org/grpc"
-)
-
-const authSvcName = "auth.v1.AuthService"
-
-type authGrpcClient struct {
-	authenticate    endpoint.Endpoint
-	authenticatePAT endpoint.Endpoint
-	authorize       endpoint.Endpoint
-	authorizePAT    endpoint.Endpoint
-	timeout         time.Duration
-}
-
-var _ grpcAuthV1.AuthServiceClient = (*authGrpcClient)(nil)
-
-// NewAuthClient returns new auth gRPC client instance.
-func NewAuthClient(conn *grpc.ClientConn, timeout time.Duration) grpcAuthV1.AuthServiceClient {
-	return &authGrpcClient{
-		authenticate: kitgrpc.NewClient(
-			conn,
-			authSvcName,
-			"Authenticate",
-			encodeIdentifyRequest,
-			decodeIdentifyResponse,
-			grpcAuthV1.AuthNRes{},
-		).Endpoint(),
-		authenticatePAT: kitgrpc.NewClient(
-			conn,
-			authSvcName,
-			"AuthenticatePAT",
-			encodeIdentifyRequest,
-			decodeIdentifyPATResponse,
-			grpcAuthV1.AuthNRes{},
-		).Endpoint(),
-		authorize: kitgrpc.NewClient(
-			conn,
-			authSvcName,
-			"Authorize",
-			encodeAuthorizeRequest,
-			decodeAuthorizeResponse,
-			grpcAuthV1.AuthZRes{},
-		).Endpoint(),
-		authorizePAT: kitgrpc.NewClient(
-			conn,
-			authSvcName,
-			"AuthorizePAT",
-			encodeAuthorizePATRequest,
-			decodeAuthorizeResponse,
-			grpcAuthV1.AuthZRes{},
-		).Endpoint(),
-		timeout: timeout,
-	}
-}
-
-func (client authGrpcClient) Authenticate(ctx context.Context, token *grpcAuthV1.AuthNReq, _ ...grpc.CallOption) (*grpcAuthV1.AuthNRes, error) {
-	ctx, cancel := context.WithTimeout(ctx, client.timeout)
-	defer cancel()
-
-	res, err := client.authenticate(ctx, authenticateReq{token: token.GetToken()})
-	if err != nil {
-		return &grpcAuthV1.AuthNRes{}, grpcapi.DecodeError(err)
-	}
-	ir := res.(authenticateRes)
-	return &grpcAuthV1.AuthNRes{Id: ir.id, UserId: ir.userID, UserRole: uint32(ir.userRole), Verified: ir.verified}, nil
-}
-
-func encodeIdentifyRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(authenticateReq)
-	return &grpcAuthV1.AuthNReq{Token: req.token}, nil
-}
-
-func decodeIdentifyResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(*grpcAuthV1.AuthNRes)
-	return authenticateRes{id: res.GetId(), userID: res.GetUserId(), userRole: auth.Role(res.UserRole), verified: res.GetVerified()}, nil
-}
-
-func (client authGrpcClient) AuthenticatePAT(ctx context.Context, token *grpcAuthV1.AuthNReq, _ ...grpc.CallOption) (*grpcAuthV1.AuthNRes, error) {
-	ctx, cancel := context.WithTimeout(ctx, client.timeout)
-	defer cancel()
-
-	res, err := client.authenticatePAT(ctx, authenticateReq{token: token.GetToken()})
-	if err != nil {
-		return &grpcAuthV1.AuthNRes{}, grpcapi.DecodeError(err)
-	}
-	ir := res.(authenticateRes)
-	return &grpcAuthV1.AuthNRes{Id: ir.id, UserId: ir.userID, UserRole: uint32(ir.userRole)}, nil
-}
-
-func decodeIdentifyPATResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(*grpcAuthV1.AuthNRes)
-	return authenticateRes{id: res.GetId(), userID: res.GetUserId(), userRole: auth.Role(res.UserRole)}, nil
-}
-
-func (client authGrpcClient) Authorize(ctx context.Context, req *grpcAuthV1.AuthZReq, _ ...grpc.CallOption) (r *grpcAuthV1.AuthZRes, err error) {
-	ctx, cancel := context.WithTimeout(ctx, client.timeout)
-	defer cancel()
-
-	res, err := client.authorize(ctx, authReq{
-		Domain:      req.GetDomain(),
-		SubjectType: req.GetSubjectType(),
-		Subject:     req.GetSubject(),
-		SubjectKind: req.GetSubjectKind(),
-		Relation:    req.GetRelation(),
-		Permission:  req.GetPermission(),
-		ObjectType:  req.GetObjectType(),
-		Object:      req.GetObject(),
-	})
-	if err != nil {
-		return &grpcAuthV1.AuthZRes{}, grpcapi.DecodeError(err)
-	}
-
-	ar := res.(authorizeRes)
-	return &grpcAuthV1.AuthZRes{Authorized: ar.authorized, Id: ar.id}, nil
-}
-
-func decodeAuthorizeResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(*grpcAuthV1.AuthZRes)
-	return authorizeRes{authorized: res.Authorized, id: res.Id}, nil
-}
-
-func encodeAuthorizeRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(authReq)
-	return &grpcAuthV1.AuthZReq{
-		Domain:      req.Domain,
-		SubjectType: req.SubjectType,
-		Subject:     req.Subject,
-		SubjectKind: req.SubjectKind,
-		Relation:    req.Relation,
-		Permission:  req.Permission,
-		ObjectType:  req.ObjectType,
-		Object:      req.Object,
-	}, nil
-}
-
-func (client authGrpcClient) AuthorizePAT(ctx context.Context, req *grpcAuthV1.AuthZPatReq, _ ...grpc.CallOption) (r *grpcAuthV1.AuthZRes, err error) {
-	ctx, cancel := context.WithTimeout(ctx, client.timeout)
-	defer cancel()
-
-	res, err := client.authorizePAT(ctx, authPATReq{
-		userID:           req.GetUserId(),
-		patID:            req.GetPatId(),
-		entityType:       auth.EntityType(req.GetEntityType()),
-		optionalDomainID: req.GetOptionalDomainId(),
-		operation:        auth.Operation(req.GetOperation()),
-		entityID:         req.GetEntityId(),
-	})
-	if err != nil {
-		return &grpcAuthV1.AuthZRes{}, grpcapi.DecodeError(err)
-	}
-
-	ar := res.(authorizeRes)
-	return &grpcAuthV1.AuthZRes{Authorized: ar.authorized, Id: ar.id}, nil
-}
-
-func encodeAuthorizePATRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(authPATReq)
-	return &grpcAuthV1.AuthZPatReq{
-		UserId:           req.userID,
-		PatId:            req.patID,
-		EntityType:       uint32(req.entityType),
-		OptionalDomainId: req.optionalDomainID,
-		Operation:        uint32(req.operation),
-		EntityId:         req.entityID,
-	}, nil
-}

auth/api/grpc/auth/doc.go

@@ -1,5 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package auth contains implementation of Auth service gRPC API.
-package auth

auth/api/grpc/auth/endpoint.go

@@ -1,83 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-import (
-	"context"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/policies"
-	"github.com/go-kit/kit/endpoint"
-)
-
-func authenticateEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(authenticateReq)
-		if err := req.validate(); err != nil {
-			return authenticateRes{}, err
-		}
-
-		key, err := svc.Identify(ctx, req.token)
-		if err != nil {
-			return authenticateRes{}, err
-		}
-
-		return authenticateRes{userID: key.Subject, userRole: key.Role, verified: key.Verified}, nil
-	}
-}
-
-func authenticatePATEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(authenticateReq)
-		if err := req.validate(); err != nil {
-			return authenticateRes{}, err
-		}
-
-		pat, err := svc.IdentifyPAT(ctx, req.token)
-		if err != nil {
-			return authenticateRes{}, err
-		}
-
-		return authenticateRes{id: pat.ID, userID: pat.User, userRole: pat.Role}, nil
-	}
-}
-
-func authorizeEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(authReq)
-
-		if err := req.validate(); err != nil {
-			return authorizeRes{}, err
-		}
-		err := svc.Authorize(ctx, policies.Policy{
-			Domain:      req.Domain,
-			SubjectType: req.SubjectType,
-			SubjectKind: req.SubjectKind,
-			Subject:     req.Subject,
-			Relation:    req.Relation,
-			Permission:  req.Permission,
-			ObjectType:  req.ObjectType,
-			Object:      req.Object,
-		})
-		if err != nil {
-			return authorizeRes{authorized: false}, err
-		}
-		return authorizeRes{authorized: true}, nil
-	}
-}
-
-func authorizePATEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(authPATReq)
-
-		if err := req.validate(); err != nil {
-			return authorizeRes{}, err
-		}
-		err := svc.AuthorizePAT(ctx, req.userID, req.patID, req.entityType, req.optionalDomainID, req.operation, req.entityID)
-		if err != nil {
-			return authorizeRes{authorized: false}, err
-		}
-		return authorizeRes{authorized: true}, nil
-	}
-}

auth/api/grpc/auth/endpoint_test.go

@@ -1,374 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth_test
-
-import (
-	"context"
-	"fmt"
-	"net"
-	"testing"
-	"time"
-
-	grpcAuthV1 "github.com/absmach/supermq/api/grpc/auth/v1"
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	grpcapi "github.com/absmach/supermq/auth/api/grpc/auth"
-	"github.com/absmach/supermq/internal/testsutil"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/mock"
-	"google.golang.org/grpc"
-	"google.golang.org/grpc/credentials/insecure"
-)
-
-const (
-	port            = 8081
-	secret          = "secret"
-	email           = "test@example.com"
-	id              = "testID"
-	clientsType     = "clients"
-	usersType       = "users"
-	description     = "Description"
-	groupName       = "smqx"
-	adminPermission = "admin"
-
-	authoritiesObj  = "authorities"
-	memberRelation  = "member"
-	loginDuration   = 30 * time.Minute
-	refreshDuration = 24 * time.Hour
-	invalidDuration = 7 * 24 * time.Hour
-	validToken      = "valid"
-	inValidToken    = "invalid"
-	validPATToken   = "valid"
-	inValidPATToken = "invalid"
-	validPolicy     = "valid"
-)
-
-var (
-	domainID = testsutil.GenerateUUID(&testing.T{})
-	authAddr = fmt.Sprintf("localhost:%d", port)
-	clientID = testsutil.GenerateUUID(&testing.T{})
-)
-
-func startGRPCServer(svc auth.Service, port int) *grpc.Server {
-	listener, _ := net.Listen("tcp", fmt.Sprintf(":%d", port))
-	server := grpc.NewServer()
-	grpcAuthV1.RegisterAuthServiceServer(server, grpcapi.NewAuthServer(svc))
-	go func() {
-		err := server.Serve(listener)
-		assert.Nil(&testing.T{}, err, fmt.Sprintf(`"Unexpected error creating auth server %s"`, err))
-	}()
-
-	return server
-}
-
-func TestIdentify(t *testing.T) {
-	conn, err := grpc.NewClient(authAddr, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	assert.Nil(t, err, fmt.Sprintf("Unexpected error creating client connection %s", err))
-	defer conn.Close()
-	grpcClient := grpcapi.NewAuthClient(conn, time.Second)
-
-	cases := []struct {
-		desc   string
-		token  string
-		idt    *grpcAuthV1.AuthNRes
-		svcErr error
-		err    error
-	}{
-		{
-			desc:  "authenticate user with valid user token",
-			token: validToken,
-			idt:   &grpcAuthV1.AuthNRes{UserId: id, UserRole: uint32(auth.UserRole)},
-			err:   nil,
-		},
-		{
-			desc:   "authenticate user with invalid user token",
-			token:  "invalid",
-			idt:    &grpcAuthV1.AuthNRes{},
-			svcErr: svcerr.ErrAuthentication,
-			err:    svcerr.ErrAuthentication,
-		},
-		{
-			desc:  "authenticate user with empty token",
-			token: "",
-			idt:   &grpcAuthV1.AuthNRes{},
-			err:   apiutil.ErrBearerToken,
-		},
-	}
-
-	for _, tc := range cases {
-		t.Run(tc.desc, func(t *testing.T) {
-			svcCall := svc.On("Identify", mock.Anything, mock.Anything).Return(auth.Key{Subject: id, Role: auth.UserRole}, tc.svcErr)
-			idt, err := grpcClient.Authenticate(context.Background(), &grpcAuthV1.AuthNReq{Token: tc.token})
-			if idt != nil {
-				assert.Equal(t, tc.idt, idt, fmt.Sprintf("%s: expected %v got %v", tc.desc, tc.idt, idt))
-			}
-			assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
-			svcCall.Unset()
-		})
-	}
-}
-
-func TestAuthorize(t *testing.T) {
-	conn, err := grpc.NewClient(authAddr, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	assert.Nil(t, err, fmt.Sprintf("Unexpected error creating client connection %s", err))
-	defer conn.Close()
-
-	grpcClient := grpcapi.NewAuthClient(conn, time.Second)
-
-	cases := []struct {
-		desc         string
-		token        string
-		authRequest  *grpcAuthV1.AuthZReq
-		authResponse *grpcAuthV1.AuthZRes
-		err          error
-	}{
-		{
-			desc:  "authorize user with authorized token",
-			token: validToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     id,
-				SubjectType: usersType,
-				Object:      authoritiesObj,
-				ObjectType:  usersType,
-				Relation:    memberRelation,
-				Permission:  adminPermission,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: true},
-			err:          nil,
-		},
-		{
-			desc:  "authorize user with unauthorized token",
-			token: inValidToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     id,
-				SubjectType: usersType,
-				Object:      authoritiesObj,
-				ObjectType:  usersType,
-				Relation:    memberRelation,
-				Permission:  adminPermission,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          svcerr.ErrAuthorization,
-		},
-		{
-			desc:  "authorize user with empty subject",
-			token: validToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     "",
-				SubjectType: usersType,
-				Object:      authoritiesObj,
-				ObjectType:  usersType,
-				Relation:    memberRelation,
-				Permission:  adminPermission,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMissingPolicySub,
-		},
-		{
-			desc:  "authorize user with empty subject type",
-			token: validToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     id,
-				SubjectType: "",
-				Object:      authoritiesObj,
-				ObjectType:  usersType,
-				Relation:    memberRelation,
-				Permission:  adminPermission,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMissingPolicySub,
-		},
-		{
-			desc:  "authorize user with empty object",
-			token: validToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     id,
-				SubjectType: usersType,
-				Object:      "",
-				ObjectType:  usersType,
-				Relation:    memberRelation,
-				Permission:  adminPermission,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMissingPolicyObj,
-		},
-		{
-			desc:  "authorize user with empty object type",
-			token: validToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     id,
-				SubjectType: usersType,
-				Object:      authoritiesObj,
-				ObjectType:  "",
-				Relation:    memberRelation,
-				Permission:  adminPermission,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMissingPolicyObj,
-		},
-		{
-			desc:  "authorize user with empty permission",
-			token: validToken,
-			authRequest: &grpcAuthV1.AuthZReq{
-				Subject:     id,
-				SubjectType: usersType,
-				Object:      authoritiesObj,
-				ObjectType:  usersType,
-				Relation:    memberRelation,
-				Permission:  "",
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMalformedPolicyPer,
-		},
-	}
-	for _, tc := range cases {
-		t.Run(tc.desc, func(t *testing.T) {
-			svcCall := svc.On("Authorize", mock.Anything, mock.Anything).Return(tc.err)
-			ar, err := grpcClient.Authorize(context.Background(), tc.authRequest)
-			if ar != nil {
-				assert.Equal(t, tc.authResponse, ar, fmt.Sprintf("%s: expected %v got %v", tc.desc, tc.authResponse, ar))
-			}
-			assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
-			svcCall.Unset()
-		})
-	}
-}
-
-func TestIdentifyPAT(t *testing.T) {
-	conn, err := grpc.NewClient(authAddr, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	assert.Nil(t, err, fmt.Sprintf("Unexpected error creating client connection %s", err))
-	defer conn.Close()
-	grpcClient := grpcapi.NewAuthClient(conn, time.Second)
-
-	cases := []struct {
-		desc   string
-		token  string
-		idt    *grpcAuthV1.AuthNRes
-		svcErr error
-		err    error
-	}{
-		{
-			desc:  "authenticate user with valid user token",
-			token: validToken,
-			idt:   &grpcAuthV1.AuthNRes{Id: id, UserId: clientID},
-			err:   nil,
-		},
-		{
-			desc:   "authenticate user with invalid user token",
-			token:  "invalid",
-			idt:    &grpcAuthV1.AuthNRes{},
-			svcErr: svcerr.ErrAuthentication,
-			err:    svcerr.ErrAuthentication,
-		},
-		{
-			desc:  "authenticate user with empty token",
-			token: "",
-			idt:   &grpcAuthV1.AuthNRes{},
-			err:   apiutil.ErrBearerToken,
-		},
-	}
-
-	for _, tc := range cases {
-		t.Run(tc.desc, func(t *testing.T) {
-			svcCall := svc.On("IdentifyPAT", mock.Anything, tc.token).Return(auth.PAT{ID: id, User: clientID, IssuedAt: time.Now()}, tc.svcErr)
-			idt, err := grpcClient.AuthenticatePAT(context.Background(), &grpcAuthV1.AuthNReq{Token: tc.token})
-			if idt != nil {
-				assert.Equal(t, tc.idt, idt, fmt.Sprintf("%s: expected %v got %v", tc.desc, tc.idt, idt))
-			}
-			assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
-			svcCall.Unset()
-		})
-	}
-}
-
-func TestAuthorizePAT(t *testing.T) {
-	conn, err := grpc.NewClient(authAddr, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	assert.Nil(t, err, fmt.Sprintf("Unexpected error creating client connection %s", err))
-	defer conn.Close()
-
-	grpcClient := grpcapi.NewAuthClient(conn, time.Second)
-	cases := []struct {
-		desc         string
-		token        string
-		authRequest  *grpcAuthV1.AuthZPatReq
-		authResponse *grpcAuthV1.AuthZRes
-		err          error
-	}{
-		{
-			desc:  "authorize user with authorized token",
-			token: validPATToken,
-			authRequest: &grpcAuthV1.AuthZPatReq{
-				UserId:           id,
-				PatId:            id,
-				EntityType:       uint32(auth.ClientsType),
-				OptionalDomainId: domainID,
-				Operation:        uint32(auth.CreateOp),
-				EntityId:         clientID,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: true},
-			err:          nil,
-		},
-		{
-			desc:  "authorize user with unauthorized token",
-			token: inValidPATToken,
-			authRequest: &grpcAuthV1.AuthZPatReq{
-				UserId:           id,
-				PatId:            id,
-				EntityType:       uint32(auth.ClientsType),
-				OptionalDomainId: domainID,
-				Operation:        uint32(auth.CreateOp),
-				EntityId:         clientID,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          svcerr.ErrAuthorization,
-		},
-		{
-			desc:  "authorize user with missing user id",
-			token: validPATToken,
-			authRequest: &grpcAuthV1.AuthZPatReq{
-				PatId:            id,
-				EntityType:       uint32(auth.ClientsType),
-				OptionalDomainId: domainID,
-				Operation:        uint32(auth.CreateOp),
-				EntityId:         clientID,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMissingUserID,
-		},
-		{
-			desc:  "authorize user with missing pat id",
-			token: validPATToken,
-			authRequest: &grpcAuthV1.AuthZPatReq{
-				UserId:           id,
-				EntityType:       uint32(auth.ClientsType),
-				OptionalDomainId: domainID,
-				Operation:        uint32(auth.CreateOp),
-				EntityId:         clientID,
-			},
-			authResponse: &grpcAuthV1.AuthZRes{Authorized: false},
-			err:          apiutil.ErrMissingPATID,
-		},
-	}
-	for _, tc := range cases {
-		t.Run(tc.desc, func(t *testing.T) {
-			svcCall := svc.On("AuthorizePAT",
-				mock.Anything,
-				tc.authRequest.UserId,
-				tc.authRequest.PatId,
-				mock.Anything,
-				tc.authRequest.OptionalDomainId,
-				mock.Anything,
-				mock.Anything,
-				mock.Anything).Return(tc.err)
-			ar, err := grpcClient.AuthorizePAT(context.Background(), tc.authRequest)
-			if ar != nil {
-				assert.Equal(t, tc.authResponse, ar, fmt.Sprintf("%s: expected %v got %v", tc.desc, tc.authResponse, ar))
-			}
-			assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
-			svcCall.Unset()
-		})
-	}
-}

auth/api/grpc/auth/requests.go

@@ -1,71 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-import (
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-)
-
-type authenticateReq struct {
-	token string
-}
-
-func (req authenticateReq) validate() error {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-
-	return nil
-}
-
-// authReq represents authorization request. It contains:
-// 1. subject - an action invoker
-// 2. object - an entity over which action will be executed
-// 3. action - type of action that will be executed (read/write).
-type authReq struct {
-	Domain      string
-	SubjectType string
-	SubjectKind string
-	Subject     string
-	Relation    string
-	Permission  string
-	ObjectType  string
-	Object      string
-}
-
-func (req authReq) validate() error {
-	if req.Subject == "" || req.SubjectType == "" {
-		return apiutil.ErrMissingPolicySub
-	}
-
-	if req.Object == "" || req.ObjectType == "" {
-		return apiutil.ErrMissingPolicyObj
-	}
-
-	if req.Permission == "" {
-		return apiutil.ErrMalformedPolicyPer
-	}
-
-	return nil
-}
-
-type authPATReq struct {
-	userID           string
-	patID            string
-	entityType       auth.EntityType
-	optionalDomainID string
-	operation        auth.Operation
-	entityID         string
-}
-
-func (req authPATReq) validate() error {
-	if req.userID == "" {
-		return apiutil.ErrMissingUserID
-	}
-	if req.patID == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}

auth/api/grpc/auth/responses.go

@@ -1,18 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-import smqauth "github.com/absmach/supermq/auth"
-
-type authenticateRes struct {
-	id       string
-	userID   string
-	userRole smqauth.Role
-	verified bool
-}
-
-type authorizeRes struct {
-	id         string
-	authorized bool
-}

auth/api/grpc/auth/server.go

@@ -1,130 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-import (
-	"context"
-
-	grpcAuthV1 "github.com/absmach/supermq/api/grpc/auth/v1"
-	"github.com/absmach/supermq/auth"
-	grpcapi "github.com/absmach/supermq/auth/api/grpc"
-	kitgrpc "github.com/go-kit/kit/transport/grpc"
-)
-
-var _ grpcAuthV1.AuthServiceServer = (*authGrpcServer)(nil)
-
-type authGrpcServer struct {
-	grpcAuthV1.UnimplementedAuthServiceServer
-	authorize       kitgrpc.Handler
-	authenticate    kitgrpc.Handler
-	authenticatePAT kitgrpc.Handler
-	authorizePAT    kitgrpc.Handler
-}
-
-// NewAuthServer returns new AuthnServiceServer instance.
-func NewAuthServer(svc auth.Service) grpcAuthV1.AuthServiceServer {
-	return &authGrpcServer{
-		authorize: kitgrpc.NewServer(
-			(authorizeEndpoint(svc)),
-			decodeAuthorizeRequest,
-			encodeAuthorizeResponse,
-		),
-
-		authenticate: kitgrpc.NewServer(
-			(authenticateEndpoint(svc)),
-			decodeAuthenticateRequest,
-			encodeAuthenticateResponse,
-		),
-
-		authenticatePAT: kitgrpc.NewServer(
-			(authenticatePATEndpoint(svc)),
-			decodeAuthenticateRequest,
-			encodeAuthenticatePATResponse,
-		),
-
-		authorizePAT: kitgrpc.NewServer(
-			(authorizePATEndpoint(svc)),
-			decodeAuthorizePATRequest,
-			encodeAuthorizeResponse,
-		),
-	}
-}
-
-func (s *authGrpcServer) Authenticate(ctx context.Context, req *grpcAuthV1.AuthNReq) (*grpcAuthV1.AuthNRes, error) {
-	_, res, err := s.authenticate.ServeGRPC(ctx, req)
-	if err != nil {
-		return nil, grpcapi.EncodeError(err)
-	}
-	return res.(*grpcAuthV1.AuthNRes), nil
-}
-
-func (s *authGrpcServer) AuthenticatePAT(ctx context.Context, req *grpcAuthV1.AuthNReq) (*grpcAuthV1.AuthNRes, error) {
-	_, res, err := s.authenticatePAT.ServeGRPC(ctx, req)
-	if err != nil {
-		return nil, grpcapi.EncodeError(err)
-	}
-	return res.(*grpcAuthV1.AuthNRes), nil
-}
-
-func (s *authGrpcServer) Authorize(ctx context.Context, req *grpcAuthV1.AuthZReq) (*grpcAuthV1.AuthZRes, error) {
-	_, res, err := s.authorize.ServeGRPC(ctx, req)
-	if err != nil {
-		return nil, grpcapi.EncodeError(err)
-	}
-	return res.(*grpcAuthV1.AuthZRes), nil
-}
-
-func decodeAuthenticateRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(*grpcAuthV1.AuthNReq)
-	return authenticateReq{token: req.GetToken()}, nil
-}
-
-func encodeAuthenticateResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(authenticateRes)
-	return &grpcAuthV1.AuthNRes{Id: res.id, UserId: res.userID, UserRole: uint32(res.userRole), Verified: res.verified}, nil
-}
-
-func encodeAuthenticatePATResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(authenticateRes)
-	return &grpcAuthV1.AuthNRes{Id: res.id, UserId: res.userID, UserRole: uint32(res.userRole)}, nil
-}
-
-func decodeAuthorizeRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(*grpcAuthV1.AuthZReq)
-	return authReq{
-		Domain:      req.GetDomain(),
-		SubjectType: req.GetSubjectType(),
-		SubjectKind: req.GetSubjectKind(),
-		Subject:     req.GetSubject(),
-		Relation:    req.GetRelation(),
-		Permission:  req.GetPermission(),
-		ObjectType:  req.GetObjectType(),
-		Object:      req.GetObject(),
-	}, nil
-}
-
-func encodeAuthorizeResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(authorizeRes)
-	return &grpcAuthV1.AuthZRes{Authorized: res.authorized, Id: res.id}, nil
-}
-
-func decodeAuthorizePATRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(*grpcAuthV1.AuthZPatReq)
-	return authPATReq{
-		userID:           req.GetUserId(),
-		patID:            req.GetPatId(),
-		entityType:       auth.EntityType(req.GetEntityType()),
-		optionalDomainID: req.GetOptionalDomainId(),
-		operation:        auth.Operation(req.GetOperation()),
-		entityID:         req.GetEntityId(),
-	}, nil
-}
-
-func (s *authGrpcServer) AuthorizePAT(ctx context.Context, req *grpcAuthV1.AuthZPatReq) (*grpcAuthV1.AuthZRes, error) {
-	_, res, err := s.authorizePAT.ServeGRPC(ctx, req)
-	if err != nil {
-		return nil, grpcapi.EncodeError(err)
-	}
-	return res.(*grpcAuthV1.AuthZRes), nil
-}

auth/api/grpc/auth/setup_test.go

@@ -1,24 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth_test
-
-import (
-	"os"
-	"testing"
-
-	"github.com/absmach/supermq/auth/mocks"
-)
-
-var svc *mocks.Service
-
-func TestMain(m *testing.M) {
-	svc = new(mocks.Service)
-	server := startGRPCServer(svc, port)
-
-	code := m.Run()
-
-	server.GracefulStop()
-
-	os.Exit(code)
-}

auth/api/grpc/token/client.go

@@ -1,99 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token
-
-import (
-	"context"
-	"time"
-
-	grpcTokenV1 "github.com/absmach/supermq/api/grpc/token/v1"
-	"github.com/absmach/supermq/auth"
-	grpcapi "github.com/absmach/supermq/auth/api/grpc"
-	"github.com/go-kit/kit/endpoint"
-	kitgrpc "github.com/go-kit/kit/transport/grpc"
-	"google.golang.org/grpc"
-)
-
-const tokenSvcName = "token.v1.TokenService"
-
-type tokenGrpcClient struct {
-	issue   endpoint.Endpoint
-	refresh endpoint.Endpoint
-	timeout time.Duration
-}
-
-var _ grpcTokenV1.TokenServiceClient = (*tokenGrpcClient)(nil)
-
-// NewAuthClient returns new auth gRPC client instance.
-func NewTokenClient(conn *grpc.ClientConn, timeout time.Duration) grpcTokenV1.TokenServiceClient {
-	return &tokenGrpcClient{
-		issue: kitgrpc.NewClient(
-			conn,
-			tokenSvcName,
-			"Issue",
-			encodeIssueRequest,
-			decodeIssueResponse,
-			grpcTokenV1.Token{},
-		).Endpoint(),
-		refresh: kitgrpc.NewClient(
-			conn,
-			tokenSvcName,
-			"Refresh",
-			encodeRefreshRequest,
-			decodeRefreshResponse,
-			grpcTokenV1.Token{},
-		).Endpoint(),
-		timeout: timeout,
-	}
-}
-
-func (client tokenGrpcClient) Issue(ctx context.Context, req *grpcTokenV1.IssueReq, _ ...grpc.CallOption) (*grpcTokenV1.Token, error) {
-	ctx, cancel := context.WithTimeout(ctx, client.timeout)
-	defer cancel()
-
-	res, err := client.issue(ctx, issueReq{
-		userID:   req.GetUserId(),
-		userRole: auth.Role(req.GetUserRole()),
-		keyType:  auth.KeyType(req.GetType()),
-		verified: req.GetVerified(),
-	})
-	if err != nil {
-		return &grpcTokenV1.Token{}, grpcapi.DecodeError(err)
-	}
-	return res.(*grpcTokenV1.Token), nil
-}
-
-func encodeIssueRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(issueReq)
-	return &grpcTokenV1.IssueReq{
-		UserId:   req.userID,
-		UserRole: uint32(req.userRole),
-		Type:     uint32(req.keyType),
-		Verified: req.verified,
-	}, nil
-}
-
-func decodeIssueResponse(_ context.Context, grpcRes any) (any, error) {
-	return grpcRes, nil
-}
-
-func (client tokenGrpcClient) Refresh(ctx context.Context, req *grpcTokenV1.RefreshReq, _ ...grpc.CallOption) (*grpcTokenV1.Token, error) {
-	ctx, cancel := context.WithTimeout(ctx, client.timeout)
-	defer cancel()
-
-	res, err := client.refresh(ctx, refreshReq{refreshToken: req.GetRefreshToken(), verified: req.GetVerified()})
-	if err != nil {
-		return &grpcTokenV1.Token{}, grpcapi.DecodeError(err)
-	}
-	return res.(*grpcTokenV1.Token), nil
-}
-
-func encodeRefreshRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(refreshReq)
-	return &grpcTokenV1.RefreshReq{RefreshToken: req.refreshToken, Verified: req.verified}, nil
-}
-
-func decodeRefreshResponse(_ context.Context, grpcRes any) (any, error) {
-	return grpcRes, nil
-}

auth/api/grpc/token/doc.go

@@ -1,5 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package grpc contains implementation of Auth service gRPC API.
-package token

auth/api/grpc/token/endpoint.go

@@ -1,58 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token
-
-import (
-	"context"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/go-kit/kit/endpoint"
-)
-
-func issueEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(issueReq)
-		if err := req.validate(); err != nil {
-			return issueRes{}, err
-		}
-
-		key := auth.Key{
-			Type:     req.keyType,
-			Subject:  req.userID,
-			Role:     req.userRole,
-			Verified: req.verified,
-		}
-		tkn, err := svc.Issue(ctx, "", key)
-		if err != nil {
-			return issueRes{}, err
-		}
-		ret := issueRes{
-			accessToken:  tkn.AccessToken,
-			refreshToken: tkn.RefreshToken,
-			accessType:   tkn.AccessType,
-		}
-		return ret, nil
-	}
-}
-
-func refreshEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(refreshReq)
-		if err := req.validate(); err != nil {
-			return issueRes{}, err
-		}
-
-		key := auth.Key{Type: auth.RefreshKey, Verified: req.verified}
-		tkn, err := svc.Issue(ctx, req.refreshToken, key)
-		if err != nil {
-			return issueRes{}, err
-		}
-		ret := issueRes{
-			accessToken:  tkn.AccessToken,
-			refreshToken: tkn.RefreshToken,
-			accessType:   tkn.AccessType,
-		}
-		return ret, nil
-	}
-}

auth/api/grpc/token/endpoint_test.go

@@ -1,169 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token_test
-
-import (
-	"context"
-	"fmt"
-	"net"
-	"testing"
-	"time"
-
-	grpcTokenV1 "github.com/absmach/supermq/api/grpc/token/v1"
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	grpcapi "github.com/absmach/supermq/auth/api/grpc/token"
-	"github.com/absmach/supermq/internal/testsutil"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/mock"
-	"google.golang.org/grpc"
-	"google.golang.org/grpc/credentials/insecure"
-)
-
-const (
-	port            = 8082
-	secret          = "secret"
-	email           = "test@example.com"
-	id              = "testID"
-	clientsType     = "clients"
-	usersType       = "users"
-	description     = "Description"
-	groupName       = "smqx"
-	adminPermission = "admin"
-
-	authoritiesObj  = "authorities"
-	memberRelation  = "member"
-	loginDuration   = 30 * time.Minute
-	refreshDuration = 24 * time.Hour
-	invalidDuration = 7 * 24 * time.Hour
-	validToken      = "valid"
-	inValidToken    = "invalid"
-	validPolicy     = "valid"
-)
-
-var (
-	validID  = testsutil.GenerateUUID(&testing.T{})
-	authAddr = fmt.Sprintf("localhost:%d", port)
-)
-
-func startGRPCServer(svc auth.Service, port int) *grpc.Server {
-	listener, _ := net.Listen("tcp", fmt.Sprintf(":%d", port))
-	server := grpc.NewServer()
-	grpcTokenV1.RegisterTokenServiceServer(server, grpcapi.NewTokenServer(svc))
-	go func() {
-		err := server.Serve(listener)
-		assert.Nil(&testing.T{}, err, fmt.Sprintf(`"Unexpected error creating auth server %s"`, err))
-	}()
-
-	return server
-}
-
-func TestIssue(t *testing.T) {
-	conn, err := grpc.NewClient(authAddr, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	defer conn.Close()
-	assert.Nil(t, err, fmt.Sprintf("Unexpected error creating client connection %s", err))
-	grpcClient := grpcapi.NewTokenClient(conn, time.Second)
-
-	cases := []struct {
-		desc          string
-		userId        string
-		kind          auth.KeyType
-		issueResponse auth.Token
-		err           error
-	}{
-		{
-			desc:   "issue for user with valid token",
-			userId: validID,
-			kind:   auth.AccessKey,
-			issueResponse: auth.Token{
-				AccessToken:  validToken,
-				RefreshToken: validToken,
-			},
-			err: nil,
-		},
-		{
-			desc:   "issue recovery key",
-			userId: validID,
-			kind:   auth.RecoveryKey,
-			issueResponse: auth.Token{
-				AccessToken:  validToken,
-				RefreshToken: validToken,
-			},
-			err: nil,
-		},
-		{
-			desc:          "issue API key unauthenticated",
-			userId:        validID,
-			kind:          auth.APIKey,
-			issueResponse: auth.Token{},
-			err:           svcerr.ErrAuthentication,
-		},
-		{
-			desc:          "issue for invalid key type",
-			userId:        validID,
-			kind:          32,
-			issueResponse: auth.Token{},
-			err:           errors.ErrMalformedEntity,
-		},
-		{
-			desc:          "issue for user that does notexist",
-			userId:        "",
-			kind:          auth.APIKey,
-			issueResponse: auth.Token{},
-			err:           svcerr.ErrAuthentication,
-		},
-	}
-
-	for _, tc := range cases {
-		svcCall := svc.On("Issue", mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return(tc.issueResponse, tc.err)
-		_, err := grpcClient.Issue(context.Background(), &grpcTokenV1.IssueReq{UserId: tc.userId, Type: uint32(tc.kind)})
-		assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
-		svcCall.Unset()
-	}
-}
-
-func TestRefresh(t *testing.T) {
-	conn, err := grpc.NewClient(authAddr, grpc.WithTransportCredentials(insecure.NewCredentials()))
-	defer conn.Close()
-	assert.Nil(t, err, fmt.Sprintf("Unexpected error creating client connection %s", err))
-	grpcClient := grpcapi.NewTokenClient(conn, time.Second)
-
-	cases := []struct {
-		desc          string
-		token         string
-		issueResponse auth.Token
-		err           error
-	}{
-		{
-			desc:  "refresh token with valid token",
-			token: validToken,
-			issueResponse: auth.Token{
-				AccessToken:  validToken,
-				RefreshToken: validToken,
-			},
-			err: nil,
-		},
-		{
-			desc:          "refresh token with invalid token",
-			token:         inValidToken,
-			issueResponse: auth.Token{},
-			err:           svcerr.ErrAuthentication,
-		},
-		{
-			desc:          "refresh token with empty token",
-			token:         "",
-			issueResponse: auth.Token{},
-			err:           apiutil.ErrMissingSecret,
-		},
-	}
-
-	for _, tc := range cases {
-		svcCall := svc.On("Issue", mock.Anything, mock.Anything, mock.Anything, mock.Anything).Return(tc.issueResponse, tc.err)
-		_, err := grpcClient.Refresh(context.Background(), &grpcTokenV1.RefreshReq{RefreshToken: tc.token})
-		assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s: expected %s got %s\n", tc.desc, tc.err, err))
-		svcCall.Unset()
-	}
-}

auth/api/grpc/token/requests.go

@@ -1,40 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token
-
-import (
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-)
-
-type issueReq struct {
-	userID   string
-	userRole auth.Role
-	keyType  auth.KeyType
-	verified bool
-}
-
-func (req issueReq) validate() error {
-	if req.keyType != auth.AccessKey &&
-		req.keyType != auth.APIKey &&
-		req.keyType != auth.RecoveryKey &&
-		req.keyType != auth.InvitationKey {
-		return apiutil.ErrInvalidAuthKey
-	}
-
-	return nil
-}
-
-type refreshReq struct {
-	refreshToken string
-	verified     bool
-}
-
-func (req refreshReq) validate() error {
-	if req.refreshToken == "" {
-		return apiutil.ErrMissingSecret
-	}
-
-	return nil
-}

auth/api/grpc/token/responses.go

@@ -1,10 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token
-
-type issueRes struct {
-	accessToken  string
-	refreshToken string
-	accessType   string
-}

auth/api/grpc/token/server.go

@@ -1,78 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token
-
-import (
-	"context"
-
-	grpcTokenV1 "github.com/absmach/supermq/api/grpc/token/v1"
-	"github.com/absmach/supermq/auth"
-	grpcapi "github.com/absmach/supermq/auth/api/grpc"
-	kitgrpc "github.com/go-kit/kit/transport/grpc"
-)
-
-var _ grpcTokenV1.TokenServiceServer = (*tokenGrpcServer)(nil)
-
-type tokenGrpcServer struct {
-	grpcTokenV1.UnimplementedTokenServiceServer
-	issue   kitgrpc.Handler
-	refresh kitgrpc.Handler
-}
-
-// NewAuthServer returns new AuthnServiceServer instance.
-func NewTokenServer(svc auth.Service) grpcTokenV1.TokenServiceServer {
-	return &tokenGrpcServer{
-		issue: kitgrpc.NewServer(
-			(issueEndpoint(svc)),
-			decodeIssueRequest,
-			encodeIssueResponse,
-		),
-		refresh: kitgrpc.NewServer(
-			(refreshEndpoint(svc)),
-			decodeRefreshRequest,
-			encodeIssueResponse,
-		),
-	}
-}
-
-func (s *tokenGrpcServer) Issue(ctx context.Context, req *grpcTokenV1.IssueReq) (*grpcTokenV1.Token, error) {
-	_, res, err := s.issue.ServeGRPC(ctx, req)
-	if err != nil {
-		return nil, grpcapi.EncodeError(err)
-	}
-	return res.(*grpcTokenV1.Token), nil
-}
-
-func (s *tokenGrpcServer) Refresh(ctx context.Context, req *grpcTokenV1.RefreshReq) (*grpcTokenV1.Token, error) {
-	_, res, err := s.refresh.ServeGRPC(ctx, req)
-	if err != nil {
-		return nil, grpcapi.EncodeError(err)
-	}
-	return res.(*grpcTokenV1.Token), nil
-}
-
-func decodeIssueRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(*grpcTokenV1.IssueReq)
-	return issueReq{
-		userID:   req.GetUserId(),
-		userRole: auth.Role(req.GetUserRole()),
-		keyType:  auth.KeyType(req.GetType()),
-		verified: req.Verified,
-	}, nil
-}
-
-func decodeRefreshRequest(_ context.Context, grpcReq any) (any, error) {
-	req := grpcReq.(*grpcTokenV1.RefreshReq)
-	return refreshReq{refreshToken: req.GetRefreshToken(), verified: req.Verified}, nil
-}
-
-func encodeIssueResponse(_ context.Context, grpcRes any) (any, error) {
-	res := grpcRes.(issueRes)
-
-	return &grpcTokenV1.Token{
-		AccessToken:  res.accessToken,
-		RefreshToken: &res.refreshToken,
-		AccessType:   res.accessType,
-	}, nil
-}

auth/api/grpc/token/setup_test.go

@@ -1,24 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package token_test
-
-import (
-	"os"
-	"testing"
-
-	"github.com/absmach/supermq/auth/mocks"
-)
-
-var svc *mocks.Service
-
-func TestMain(m *testing.M) {
-	svc = new(mocks.Service)
-	server := startGRPCServer(svc, port)
-
-	code := m.Run()
-
-	server.GracefulStop()
-
-	os.Exit(code)
-}

auth/api/grpc/utils.go

@@ -1,74 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package grpc
-
-import (
-	"fmt"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"google.golang.org/grpc/codes"
-	"google.golang.org/grpc/status"
-)
-
-func EncodeError(err error) error {
-	switch {
-	case errors.Contains(err, nil):
-		return nil
-	case errors.Contains(err, errors.ErrMalformedEntity),
-		errors.Contains(err, svcerr.ErrInvalidPolicy),
-		err == apiutil.ErrInvalidAuthKey,
-		err == apiutil.ErrMissingID,
-		err == apiutil.ErrMissingMemberType,
-		err == apiutil.ErrMissingPolicySub,
-		err == apiutil.ErrMissingPolicyObj,
-		err == apiutil.ErrMalformedPolicyAct,
-		err == apiutil.ErrMissingUserID,
-		err == apiutil.ErrMissingPATID:
-		return status.Error(codes.InvalidArgument, err.Error())
-	case errors.Contains(err, svcerr.ErrAuthentication),
-		errors.Contains(err, auth.ErrKeyExpired),
-		err == apiutil.ErrMissingEmail,
-		err == apiutil.ErrBearerToken:
-		return status.Error(codes.Unauthenticated, err.Error())
-	case errors.Contains(err, svcerr.ErrAuthorization),
-		errors.Contains(err, svcerr.ErrDomainAuthorization):
-		return status.Error(codes.PermissionDenied, err.Error())
-	case errors.Contains(err, svcerr.ErrNotFound):
-		return status.Error(codes.NotFound, err.Error())
-	case errors.Contains(err, svcerr.ErrConflict):
-		return status.Error(codes.AlreadyExists, err.Error())
-	default:
-		return status.Error(codes.Internal, err.Error())
-	}
-}
-
-func DecodeError(err error) error {
-	if st, ok := status.FromError(err); ok {
-		switch st.Code() {
-		case codes.NotFound:
-			return errors.Wrap(svcerr.ErrNotFound, errors.New(st.Message()))
-		case codes.InvalidArgument:
-			return errors.Wrap(errors.ErrMalformedEntity, errors.New(st.Message()))
-		case codes.AlreadyExists:
-			return errors.Wrap(svcerr.ErrConflict, errors.New(st.Message()))
-		case codes.Unauthenticated:
-			return errors.Wrap(svcerr.ErrAuthentication, errors.New(st.Message()))
-		case codes.OK:
-			if msg := st.Message(); msg != "" {
-				return errors.Wrap(errors.ErrUnidentified, errors.New(msg))
-			}
-			return nil
-		case codes.FailedPrecondition:
-			return errors.Wrap(errors.ErrMalformedEntity, errors.New(st.Message()))
-		case codes.PermissionDenied:
-			return errors.Wrap(svcerr.ErrAuthorization, errors.New(st.Message()))
-		default:
-			return errors.Wrap(fmt.Errorf("unexpected gRPC status: %s (status code:%v)", st.Code().String(), st.Code()), errors.New(st.Message()))
-		}
-	}
-	return err
-}

auth/api/http/doc.go

@@ -1,3 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-package http

auth/api/http/keys/endpoint.go

@@ -1,87 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package keys
-
-import (
-	"context"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/go-kit/kit/endpoint"
-)
-
-func issueEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(issueKeyReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		now := time.Now().UTC()
-		newKey := auth.Key{
-			IssuedAt: now,
-			Type:     req.Type,
-		}
-
-		duration := time.Duration(req.Duration * time.Second)
-		if duration != 0 {
-			exp := now.Add(duration)
-			newKey.ExpiresAt = exp
-		}
-
-		tkn, err := svc.Issue(ctx, req.token, newKey)
-		if err != nil {
-			return nil, err
-		}
-
-		res := issueKeyRes{
-			Value: tkn.AccessToken,
-		}
-
-		return res, nil
-	}
-}
-
-func retrieveEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(keyReq)
-
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		key, err := svc.RetrieveKey(ctx, req.token, req.id)
-		if err != nil {
-			return nil, err
-		}
-		ret := retrieveKeyRes{
-			ID:       key.ID,
-			IssuerID: key.Issuer,
-			Subject:  key.Subject,
-			Type:     key.Type,
-			IssuedAt: key.IssuedAt,
-		}
-		if !key.ExpiresAt.IsZero() {
-			ret.ExpiresAt = &key.ExpiresAt
-		}
-
-		return ret, nil
-	}
-}
-
-func revokeEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(keyReq)
-
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		if err := svc.Revoke(ctx, req.token, req.id); err != nil {
-			return nil, err
-		}
-
-		return revokeKeyRes{}, nil
-	}
-}

auth/api/http/keys/endpoint_test.go

@@ -1,354 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package keys_test
-
-import (
-	"context"
-	"encoding/json"
-	"fmt"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-	"time"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	httpapi "github.com/absmach/supermq/auth/api/http"
-	"github.com/absmach/supermq/auth/jwt"
-	"github.com/absmach/supermq/auth/mocks"
-	smqlog "github.com/absmach/supermq/logger"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	policymocks "github.com/absmach/supermq/pkg/policies/mocks"
-	"github.com/absmach/supermq/pkg/uuid"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/mock"
-)
-
-const (
-	secret          = "secret"
-	contentType     = "application/json"
-	id              = "123e4567-e89b-12d3-a456-000000000001"
-	email           = "user@example.com"
-	loginDuration   = 30 * time.Minute
-	refreshDuration = 24 * time.Hour
-	invalidDuration = 7 * 24 * time.Hour
-)
-
-var (
-	krepo      *mocks.KeyRepository
-	pEvaluator *policymocks.Evaluator
-)
-
-type issueRequest struct {
-	Duration time.Duration `json:"duration,omitempty"`
-	Type     uint32        `json:"type,omitempty"`
-}
-
-type testRequest struct {
-	client      *http.Client
-	method      string
-	url         string
-	contentType string
-	token       string
-	body        io.Reader
-}
-
-func (tr testRequest) make() (*http.Response, error) {
-	req, err := http.NewRequest(tr.method, tr.url, tr.body)
-	if err != nil {
-		return nil, err
-	}
-	if tr.token != "" {
-		req.Header.Set("Authorization", apiutil.BearerPrefix+tr.token)
-	}
-	if tr.contentType != "" {
-		req.Header.Set("Content-Type", tr.contentType)
-	}
-
-	req.Header.Set("Referer", "http://localhost")
-	return tr.client.Do(req)
-}
-
-func newService() auth.Service {
-	krepo = new(mocks.KeyRepository)
-	pRepo := new(mocks.PATSRepository)
-	cache := new(mocks.Cache)
-	hash := new(mocks.Hasher)
-	idProvider := uuid.NewMock()
-	pService := new(policymocks.Service)
-	pEvaluator = new(policymocks.Evaluator)
-	t := jwt.New([]byte(secret))
-
-	return auth.New(krepo, pRepo, cache, hash, idProvider, t, pEvaluator, pService, loginDuration, refreshDuration, invalidDuration)
-}
-
-func newServer(svc auth.Service) *httptest.Server {
-	mux := httpapi.MakeHandler(svc, smqlog.NewMock(), "")
-	return httptest.NewServer(mux)
-}
-
-func toJSON(data any) string {
-	jsonData, err := json.Marshal(data)
-	if err != nil {
-		return ""
-	}
-	return string(jsonData)
-}
-
-func TestIssue(t *testing.T) {
-	svc := newService()
-	policyCall := pEvaluator.On("CheckPolicy", mock.Anything, mock.Anything).Return(nil)
-	token, err := svc.Issue(context.Background(), "", auth.Key{Type: auth.AccessKey, Role: auth.UserRole, IssuedAt: time.Now(), Subject: id})
-	assert.Nil(t, err, fmt.Sprintf("Issuing login key expected to succeed: %s", err))
-	policyCall.Unset()
-
-	ts := newServer(svc)
-	defer ts.Close()
-	client := ts.Client()
-
-	lk := issueRequest{Type: uint32(auth.AccessKey)}
-	ak := issueRequest{Type: uint32(auth.APIKey), Duration: time.Hour}
-	rk := issueRequest{Type: uint32(auth.RecoveryKey)}
-
-	cases := []struct {
-		desc   string
-		req    string
-		ct     string
-		token  string
-		status int
-	}{
-		{
-			desc:   "issue login key with empty token",
-			req:    toJSON(lk),
-			ct:     contentType,
-			token:  "",
-			status: http.StatusUnauthorized,
-		},
-		{
-			desc:   "issue API key",
-			req:    toJSON(ak),
-			ct:     contentType,
-			token:  token.AccessToken,
-			status: http.StatusCreated,
-		},
-		{
-			desc:   "issue recovery key",
-			req:    toJSON(rk),
-			ct:     contentType,
-			token:  token.AccessToken,
-			status: http.StatusCreated,
-		},
-		{
-			desc:   "issue login key wrong content type",
-			req:    toJSON(lk),
-			ct:     "",
-			token:  token.AccessToken,
-			status: http.StatusUnsupportedMediaType,
-		},
-		{
-			desc:   "issue recovery key wrong content type",
-			req:    toJSON(rk),
-			ct:     "",
-			token:  token.AccessToken,
-			status: http.StatusUnsupportedMediaType,
-		},
-		{
-			desc:   "issue key with an invalid token",
-			req:    toJSON(ak),
-			ct:     contentType,
-			token:  "wrong",
-			status: http.StatusUnauthorized,
-		},
-		{
-			desc:   "issue recovery key with empty token",
-			req:    toJSON(rk),
-			ct:     contentType,
-			token:  "",
-			status: http.StatusUnauthorized,
-		},
-		{
-			desc:   "issue key with invalid request",
-			req:    "{",
-			ct:     contentType,
-			token:  token.AccessToken,
-			status: http.StatusBadRequest,
-		},
-		{
-			desc:   "issue key with invalid JSON",
-			req:    "{invalid}",
-			ct:     contentType,
-			token:  token.AccessToken,
-			status: http.StatusBadRequest,
-		},
-		{
-			desc:   "issue key with invalid JSON content",
-			req:    `{"Type":{"key":"AccessToken"}}`,
-			ct:     contentType,
-			token:  token.AccessToken,
-			status: http.StatusBadRequest,
-		},
-	}
-
-	for _, tc := range cases {
-		req := testRequest{
-			client:      client,
-			method:      http.MethodPost,
-			url:         fmt.Sprintf("%s/keys", ts.URL),
-			contentType: tc.ct,
-			token:       tc.token,
-			body:        strings.NewReader(tc.req),
-		}
-		repoCall := krepo.On("Save", mock.Anything, mock.Anything).Return("", nil)
-		policyCall := pEvaluator.On("CheckPolicy", mock.Anything, mock.Anything).Return(nil)
-		res, err := req.make()
-		assert.Nil(t, err, fmt.Sprintf("%s: unexpected error %s", tc.desc, err))
-		assert.Equal(t, tc.status, res.StatusCode, fmt.Sprintf("%s: expected status code %d got %d", tc.desc, tc.status, res.StatusCode))
-		repoCall.Unset()
-		policyCall.Unset()
-	}
-}
-
-func TestRetrieve(t *testing.T) {
-	svc := newService()
-	policyCall := pEvaluator.On("CheckPolicy", mock.Anything, mock.Anything).Return(nil)
-	token, err := svc.Issue(context.Background(), "", auth.Key{Type: auth.AccessKey, Role: auth.UserRole, IssuedAt: time.Now(), Subject: id})
-	assert.Nil(t, err, fmt.Sprintf("Issuing login key expected to succeed: %s", err))
-	key := auth.Key{Type: auth.APIKey, IssuedAt: time.Now(), Subject: id}
-
-	repoCall := krepo.On("Save", mock.Anything, mock.Anything).Return(mock.Anything, nil)
-	k, err := svc.Issue(context.Background(), token.AccessToken, key)
-	assert.Nil(t, err, fmt.Sprintf("Issuing login key expected to succeed: %s", err))
-	repoCall.Unset()
-	policyCall.Unset()
-
-	ts := newServer(svc)
-	defer ts.Close()
-	client := ts.Client()
-
-	cases := []struct {
-		desc   string
-		id     string
-		token  string
-		key    auth.Key
-		status int
-		err    error
-	}{
-		{
-			desc:  "retrieve an existing key",
-			id:    k.AccessToken,
-			token: token.AccessToken,
-			key: auth.Key{
-				Subject:   id,
-				Type:      auth.AccessKey,
-				IssuedAt:  time.Now(),
-				ExpiresAt: time.Now().Add(refreshDuration),
-			},
-			status: http.StatusOK,
-			err:    nil,
-		},
-		{
-			desc:   "retrieve a non-existing key",
-			id:     "non-existing",
-			token:  token.AccessToken,
-			status: http.StatusBadRequest,
-			err:    svcerr.ErrNotFound,
-		},
-		{
-			desc:   "retrieve a key with an invalid token",
-			id:     k.AccessToken,
-			token:  "wrong",
-			status: http.StatusUnauthorized,
-			err:    svcerr.ErrAuthentication,
-		},
-		{
-			desc:   "retrieve a key with an empty token",
-			token:  "",
-			id:     k.AccessToken,
-			status: http.StatusUnauthorized,
-			err:    svcerr.ErrAuthentication,
-		},
-	}
-
-	for _, tc := range cases {
-		req := testRequest{
-			client: client,
-			method: http.MethodGet,
-			url:    fmt.Sprintf("%s/keys/%s", ts.URL, tc.id),
-			token:  tc.token,
-		}
-		policyCall := pEvaluator.On("CheckPolicy", mock.Anything, mock.Anything).Return(nil)
-		repoCall := krepo.On("Retrieve", mock.Anything, mock.Anything, mock.Anything).Return(tc.key, tc.err)
-		res, err := req.make()
-		assert.Nil(t, err, fmt.Sprintf("%s: unexpected error %s", tc.desc, err))
-		assert.Equal(t, tc.status, res.StatusCode, fmt.Sprintf("%s: expected status code %d got %d", tc.desc, tc.status, res.StatusCode))
-		repoCall.Unset()
-		policyCall.Unset()
-	}
-}
-
-func TestRevoke(t *testing.T) {
-	svc := newService()
-	policyCall := pEvaluator.On("CheckPolicy", mock.Anything, mock.Anything).Return(nil)
-	token, err := svc.Issue(context.Background(), "", auth.Key{Type: auth.AccessKey, Role: auth.UserRole, IssuedAt: time.Now(), Subject: id})
-	assert.Nil(t, err, fmt.Sprintf("Issuing login key expected to succeed: %s", err))
-	key := auth.Key{Type: auth.APIKey, IssuedAt: time.Now(), Subject: id}
-
-	repoCall := krepo.On("Save", mock.Anything, mock.Anything).Return(mock.Anything, nil)
-	k, err := svc.Issue(context.Background(), token.AccessToken, key)
-	assert.Nil(t, err, fmt.Sprintf("Issuing login key expected to succeed: %s", err))
-	repoCall.Unset()
-	policyCall.Unset()
-
-	ts := newServer(svc)
-	defer ts.Close()
-	client := ts.Client()
-
-	cases := []struct {
-		desc   string
-		id     string
-		token  string
-		status int
-	}{
-		{
-			desc:   "revoke an existing key",
-			id:     k.AccessToken,
-			token:  token.AccessToken,
-			status: http.StatusNoContent,
-		},
-		{
-			desc:   "revoke a non-existing key",
-			id:     "non-existing",
-			token:  token.AccessToken,
-			status: http.StatusNoContent,
-		},
-		{
-			desc:   "revoke key with invalid token",
-			id:     k.AccessToken,
-			token:  "wrong",
-			status: http.StatusUnauthorized,
-		},
-		{
-			desc:   "revoke key with empty token",
-			id:     k.AccessToken,
-			token:  "",
-			status: http.StatusUnauthorized,
-		},
-	}
-
-	for _, tc := range cases {
-		req := testRequest{
-			client: client,
-			method: http.MethodDelete,
-			url:    fmt.Sprintf("%s/keys/%s", ts.URL, tc.id),
-			token:  tc.token,
-		}
-		repoCall := krepo.On("Remove", mock.Anything, mock.Anything, mock.Anything).Return(nil)
-		res, err := req.make()
-		assert.Nil(t, err, fmt.Sprintf("%s: unexpected error %s", tc.desc, err))
-		assert.Equal(t, tc.status, res.StatusCode, fmt.Sprintf("%s: expected status code %d got %d", tc.desc, tc.status, res.StatusCode))
-		repoCall.Unset()
-	}
-}

auth/api/http/keys/requests.go

@@ -1,48 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package keys
-
-import (
-	"time"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-)
-
-type issueKeyReq struct {
-	token    string
-	Type     auth.KeyType  `json:"type,omitempty"`
-	Duration time.Duration `json:"duration,omitempty"`
-}
-
-// It is not possible to issue Reset key using HTTP API.
-func (req issueKeyReq) validate() error {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-
-	if req.Type != auth.AccessKey &&
-		req.Type != auth.RecoveryKey &&
-		req.Type != auth.APIKey {
-		return apiutil.ErrInvalidAPIKey
-	}
-
-	return nil
-}
-
-type keyReq struct {
-	token string
-	id    string
-}
-
-func (req keyReq) validate() error {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-
-	if req.id == "" {
-		return apiutil.ErrMissingID
-	}
-	return nil
-}

auth/api/http/keys/requests_test.go

@@ -1,88 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package keys
-
-import (
-	"testing"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	"github.com/stretchr/testify/assert"
-)
-
-var valid = "valid"
-
-func TestIssueKeyReqValidate(t *testing.T) {
-	cases := []struct {
-		desc string
-		req  issueKeyReq
-		err  error
-	}{
-		{
-			desc: "valid request",
-			req: issueKeyReq{
-				token: valid,
-				Type:  auth.AccessKey,
-			},
-			err: nil,
-		},
-		{
-			desc: "empty token",
-			req: issueKeyReq{
-				token: "",
-				Type:  auth.AccessKey,
-			},
-			err: apiutil.ErrBearerToken,
-		},
-		{
-			desc: "invalid key type",
-			req: issueKeyReq{
-				token: valid,
-				Type:  auth.KeyType(100),
-			},
-			err: apiutil.ErrInvalidAPIKey,
-		},
-	}
-	for _, tc := range cases {
-		err := tc.req.validate()
-		assert.Equal(t, tc.err, err)
-	}
-}
-
-func TestKeyReqValidate(t *testing.T) {
-	cases := []struct {
-		desc string
-		req  keyReq
-		err  error
-	}{
-		{
-			desc: "valid request",
-			req: keyReq{
-				token: valid,
-				id:    valid,
-			},
-			err: nil,
-		},
-		{
-			desc: "empty token",
-			req: keyReq{
-				token: "",
-				id:    valid,
-			},
-			err: apiutil.ErrBearerToken,
-		},
-		{
-			desc: "empty id",
-			req: keyReq{
-				token: valid,
-				id:    "",
-			},
-			err: apiutil.ErrMissingID,
-		},
-	}
-	for _, tc := range cases {
-		err := tc.req.validate()
-		assert.Equal(t, tc.err, err)
-	}
-}

auth/api/http/keys/responses.go

@@ -1,71 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package keys
-
-import (
-	"net/http"
-	"time"
-
-	"github.com/absmach/supermq"
-	"github.com/absmach/supermq/auth"
-)
-
-var (
-	_ supermq.Response = (*issueKeyRes)(nil)
-	_ supermq.Response = (*revokeKeyRes)(nil)
-)
-
-type issueKeyRes struct {
-	ID        string     `json:"id,omitempty"`
-	Value     string     `json:"value,omitempty"`
-	IssuedAt  time.Time  `json:"issued_at,omitempty"`
-	ExpiresAt *time.Time `json:"expires_at,omitempty"`
-}
-
-func (res issueKeyRes) Code() int {
-	return http.StatusCreated
-}
-
-func (res issueKeyRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res issueKeyRes) Empty() bool {
-	return res.Value == ""
-}
-
-type retrieveKeyRes struct {
-	ID        string       `json:"id,omitempty"`
-	IssuerID  string       `json:"issuer_id,omitempty"`
-	Subject   string       `json:"subject,omitempty"`
-	Type      auth.KeyType `json:"type,omitempty"`
-	IssuedAt  time.Time    `json:"issued_at,omitempty"`
-	ExpiresAt *time.Time   `json:"expires_at,omitempty"`
-}
-
-func (res retrieveKeyRes) Code() int {
-	return http.StatusOK
-}
-
-func (res retrieveKeyRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res retrieveKeyRes) Empty() bool {
-	return false
-}
-
-type revokeKeyRes struct{}
-
-func (res revokeKeyRes) Code() int {
-	return http.StatusNoContent
-}
-
-func (res revokeKeyRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res revokeKeyRes) Empty() bool {
-	return true
-}

auth/api/http/keys/transport.go

@@ -1,72 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package keys
-
-import (
-	"context"
-	"encoding/json"
-	"log/slog"
-	"net/http"
-	"strings"
-
-	api "github.com/absmach/supermq/api/http"
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-	"github.com/go-chi/chi/v5"
-	kithttp "github.com/go-kit/kit/transport/http"
-)
-
-const contentType = "application/json"
-
-// MakeHandler returns a HTTP handler for API endpoints.
-func MakeHandler(svc auth.Service, mux *chi.Mux, logger *slog.Logger) *chi.Mux {
-	opts := []kithttp.ServerOption{
-		kithttp.ServerErrorEncoder(apiutil.LoggingErrorEncoder(logger, api.EncodeError)),
-	}
-	mux.Route("/keys", func(r chi.Router) {
-		r.Post("/", kithttp.NewServer(
-			issueEndpoint(svc),
-			decodeIssue,
-			api.EncodeResponse,
-			opts...,
-		).ServeHTTP)
-
-		r.Get("/{id}", kithttp.NewServer(
-			(retrieveEndpoint(svc)),
-			decodeKeyReq,
-			api.EncodeResponse,
-			opts...,
-		).ServeHTTP)
-
-		r.Delete("/{id}", kithttp.NewServer(
-			(revokeEndpoint(svc)),
-			decodeKeyReq,
-			api.EncodeResponse,
-			opts...,
-		).ServeHTTP)
-	})
-	return mux
-}
-
-func decodeIssue(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-
-	req := issueKeyReq{token: apiutil.ExtractBearerToken(r)}
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(errors.ErrMalformedEntity, err)
-	}
-
-	return req, nil
-}
-
-func decodeKeyReq(_ context.Context, r *http.Request) (any, error) {
-	req := keyReq{
-		token: apiutil.ExtractBearerToken(r),
-		id:    chi.URLParam(r, "id"),
-	}
-	return req, nil
-}

auth/api/http/pats/endpoint.go

@@ -1,225 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package pats
-
-import (
-	"context"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/go-kit/kit/endpoint"
-)
-
-func createPATEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(createPatReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pat, err := svc.CreatePAT(ctx, req.token, req.Name, req.Description, req.Duration)
-		if err != nil {
-			return nil, err
-		}
-
-		return createPatRes{pat}, nil
-	}
-}
-
-func retrievePATEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(retrievePatReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pat, err := svc.RetrievePAT(ctx, req.token, req.id)
-		if err != nil {
-			return nil, err
-		}
-
-		return retrievePatRes{pat}, nil
-	}
-}
-
-func updatePATNameEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(updatePatNameReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pat, err := svc.UpdatePATName(ctx, req.token, req.id, req.Name)
-		if err != nil {
-			return nil, err
-		}
-
-		return updatePatNameRes{pat}, nil
-	}
-}
-
-func updatePATDescriptionEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(updatePatDescriptionReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pat, err := svc.UpdatePATDescription(ctx, req.token, req.id, req.Description)
-		if err != nil {
-			return nil, err
-		}
-
-		return updatePatDescriptionRes{pat}, nil
-	}
-}
-
-func listPATSEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(listPatsReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pm := auth.PATSPageMeta{
-			Limit:  req.limit,
-			Offset: req.offset,
-			Name:   req.name,
-			ID:     req.id,
-			Status: req.status,
-		}
-		patsPage, err := svc.ListPATS(ctx, req.token, pm)
-		if err != nil {
-			return nil, err
-		}
-
-		return listPatsRes{patsPage}, nil
-	}
-}
-
-func deletePATEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(deletePatReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		if err := svc.DeletePAT(ctx, req.token, req.id); err != nil {
-			return nil, err
-		}
-
-		return deletePatRes{}, nil
-	}
-}
-
-func resetPATSecretEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(resetPatSecretReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pat, err := svc.ResetPATSecret(ctx, req.token, req.id, req.Duration)
-		if err != nil {
-			return nil, err
-		}
-
-		return resetPatSecretRes{pat}, nil
-	}
-}
-
-func revokePATSecretEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(revokePatSecretReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		if err := svc.RevokePATSecret(ctx, req.token, req.id); err != nil {
-			return nil, err
-		}
-
-		return revokePatSecretRes{}, nil
-	}
-}
-
-func clearAllPATEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(clearAllPATReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		if err := svc.RemoveAllPAT(ctx, req.token); err != nil {
-			return nil, err
-		}
-
-		return clearAllRes{}, nil
-	}
-}
-
-func addScopeEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(addScopeReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-		err := svc.AddScope(ctx, req.token, req.id, req.Scopes)
-		if err != nil {
-			return nil, err
-		}
-
-		return scopeRes{}, nil
-	}
-}
-
-func removeScopeEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(removeScopeReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		err := svc.RemoveScope(ctx, req.token, req.id, req.ScopesID...)
-		if err != nil {
-			return nil, err
-		}
-		return scopeRes{}, nil
-	}
-}
-
-func clearAllScopeEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(clearAllScopeReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		if err := svc.RemovePATAllScope(ctx, req.token, req.id); err != nil {
-			return nil, err
-		}
-
-		return clearAllRes{}, nil
-	}
-}
-
-func listScopesEndpoint(svc auth.Service) endpoint.Endpoint {
-	return func(ctx context.Context, request any) (any, error) {
-		req := request.(listScopesReq)
-		if err := req.validate(); err != nil {
-			return nil, err
-		}
-
-		pm := auth.ScopesPageMeta{
-			Limit:  req.limit,
-			Offset: req.offset,
-			PatID:  req.patID,
-		}
-		scopesPage, err := svc.ListScopes(ctx, req.token, pm)
-		if err != nil {
-			return nil, err
-		}
-
-		return listScopeRes{scopesPage}, nil
-	}
-}

auth/api/http/pats/requests.go

@@ -1,287 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package pats
-
-import (
-	"encoding/json"
-	"strings"
-	"time"
-
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-)
-
-type createPatReq struct {
-	token       string
-	Name        string        `json:"name,omitempty"`
-	Description string        `json:"description,omitempty"`
-	Duration    time.Duration `json:"duration,omitempty"`
-}
-
-func (cpr *createPatReq) UnmarshalJSON(data []byte) error {
-	var temp struct {
-		Name        string `json:"name,omitempty"`
-		Description string `json:"description,omitempty"`
-		Duration    string `json:"duration,omitempty"`
-	}
-	if err := json.Unmarshal(data, &temp); err != nil {
-		return err
-	}
-	duration, err := time.ParseDuration(temp.Duration)
-	if err != nil {
-		return err
-	}
-	cpr.Name = temp.Name
-	cpr.Description = temp.Description
-	cpr.Duration = duration
-	return nil
-}
-
-func (req createPatReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-
-	if strings.TrimSpace(req.Name) == "" {
-		return apiutil.ErrMissingName
-	}
-
-	return nil
-}
-
-type retrievePatReq struct {
-	token string
-	id    string
-}
-
-func (req retrievePatReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}
-
-type updatePatNameReq struct {
-	token string
-	id    string
-	Name  string `json:"name,omitempty"`
-}
-
-func (req updatePatNameReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	if strings.TrimSpace(req.Name) == "" {
-		return apiutil.ErrMissingName
-	}
-	return nil
-}
-
-type updatePatDescriptionReq struct {
-	token       string
-	id          string
-	Description string `json:"description,omitempty"`
-}
-
-func (req updatePatDescriptionReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	if strings.TrimSpace(req.Description) == "" {
-		return apiutil.ErrMissingDescription
-	}
-	return nil
-}
-
-type listPatsReq struct {
-	token  string
-	offset uint64
-	limit  uint64
-	name   string
-	id     string
-	status auth.Status
-}
-
-func (req listPatsReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	return nil
-}
-
-type deletePatReq struct {
-	token string
-	id    string
-}
-
-func (req deletePatReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}
-
-type resetPatSecretReq struct {
-	token    string
-	id       string
-	Duration time.Duration `json:"duration,omitempty"`
-}
-
-func (rspr *resetPatSecretReq) UnmarshalJSON(data []byte) error {
-	var temp struct {
-		Duration string `json:"duration,omitempty"`
-	}
-
-	err := json.Unmarshal(data, &temp)
-	if err != nil {
-		return err
-	}
-	rspr.Duration, err = time.ParseDuration(temp.Duration)
-	if err != nil {
-		return err
-	}
-	return nil
-}
-
-func (req resetPatSecretReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}
-
-type revokePatSecretReq struct {
-	token string
-	id    string
-}
-
-func (req revokePatSecretReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}
-
-type clearAllPATReq struct {
-	token string
-}
-
-func (req clearAllPATReq) validate() error {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	return nil
-}
-
-type addScopeReq struct {
-	token  string
-	id     string
-	Scopes []auth.Scope `json:"scopes,omitempty"`
-}
-
-func (req *addScopeReq) UnmarshalJSON(data []byte) error {
-	type Alias addScopeReq
-	aux := &struct {
-		*Alias
-	}{
-		Alias: (*Alias)(req),
-	}
-
-	if err := json.Unmarshal(data, aux); err != nil {
-		return err
-	}
-
-	return nil
-}
-
-func (req addScopeReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-
-	if len(req.Scopes) == 0 {
-		return apiutil.ErrValidation
-	}
-
-	for _, scope := range req.Scopes {
-		if err := scope.Validate(); err != nil {
-			return errors.Wrap(apiutil.ErrValidation, err)
-		}
-	}
-
-	return nil
-}
-
-type removeScopeReq struct {
-	token    string
-	id       string
-	ScopesID []string `json:"scopes_id,omitempty"`
-}
-
-func (req removeScopeReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	if len(req.ScopesID) == 0 {
-		return apiutil.ErrValidation
-	}
-	return nil
-}
-
-type clearAllScopeReq struct {
-	token string
-	id    string
-}
-
-func (req clearAllScopeReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.id == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}
-
-type listScopesReq struct {
-	token  string
-	offset uint64
-	limit  uint64
-	patID  string
-}
-
-func (req listScopesReq) validate() (err error) {
-	if req.token == "" {
-		return apiutil.ErrBearerToken
-	}
-	if req.patID == "" {
-		return apiutil.ErrMissingPATID
-	}
-	return nil
-}

auth/api/http/pats/responses.go

@@ -1,191 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package pats
-
-import (
-	"net/http"
-
-	"github.com/absmach/supermq"
-	"github.com/absmach/supermq/auth"
-)
-
-var (
-	_ supermq.Response = (*createPatRes)(nil)
-	_ supermq.Response = (*retrievePatRes)(nil)
-	_ supermq.Response = (*updatePatNameRes)(nil)
-	_ supermq.Response = (*updatePatDescriptionRes)(nil)
-	_ supermq.Response = (*deletePatRes)(nil)
-	_ supermq.Response = (*resetPatSecretRes)(nil)
-	_ supermq.Response = (*revokePatSecretRes)(nil)
-	_ supermq.Response = (*scopeRes)(nil)
-	_ supermq.Response = (*clearAllRes)(nil)
-)
-
-type createPatRes struct {
-	auth.PAT `json:",inline"`
-}
-
-func (res createPatRes) Code() int {
-	return http.StatusCreated
-}
-
-func (res createPatRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res createPatRes) Empty() bool {
-	return false
-}
-
-type retrievePatRes struct {
-	auth.PAT `json:",inline"`
-}
-
-func (res retrievePatRes) Code() int {
-	return http.StatusOK
-}
-
-func (res retrievePatRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res retrievePatRes) Empty() bool {
-	return false
-}
-
-type updatePatNameRes struct {
-	auth.PAT `json:",inline"`
-}
-
-func (res updatePatNameRes) Code() int {
-	return http.StatusAccepted
-}
-
-func (res updatePatNameRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res updatePatNameRes) Empty() bool {
-	return false
-}
-
-type updatePatDescriptionRes struct {
-	auth.PAT `json:",inline"`
-}
-
-func (res updatePatDescriptionRes) Code() int {
-	return http.StatusAccepted
-}
-
-func (res updatePatDescriptionRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res updatePatDescriptionRes) Empty() bool {
-	return false
-}
-
-type listPatsRes struct {
-	auth.PATSPage `json:",inline"`
-}
-
-func (res listPatsRes) Code() int {
-	return http.StatusOK
-}
-
-func (res listPatsRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res listPatsRes) Empty() bool {
-	return false
-}
-
-type deletePatRes struct{}
-
-func (res deletePatRes) Code() int {
-	return http.StatusNoContent
-}
-
-func (res deletePatRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res deletePatRes) Empty() bool {
-	return true
-}
-
-type resetPatSecretRes struct {
-	auth.PAT `json:",inline"`
-}
-
-func (res resetPatSecretRes) Code() int {
-	return http.StatusOK
-}
-
-func (res resetPatSecretRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res resetPatSecretRes) Empty() bool {
-	return false
-}
-
-type revokePatSecretRes struct{}
-
-func (res revokePatSecretRes) Code() int {
-	return http.StatusNoContent
-}
-
-func (res revokePatSecretRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res revokePatSecretRes) Empty() bool {
-	return true
-}
-
-type scopeRes struct{}
-
-func (res scopeRes) Code() int {
-	return http.StatusOK
-}
-
-func (res scopeRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res scopeRes) Empty() bool {
-	return true
-}
-
-type clearAllRes struct{}
-
-func (res clearAllRes) Code() int {
-	return http.StatusOK
-}
-
-func (res clearAllRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res clearAllRes) Empty() bool {
-	return true
-}
-
-type listScopeRes struct {
-	auth.ScopesPage `json:",inline"`
-}
-
-func (res listScopeRes) Code() int {
-	return http.StatusOK
-}
-
-func (res listScopeRes) Headers() map[string]string {
-	return map[string]string{}
-}
-
-func (res listScopeRes) Empty() bool {
-	return false
-}

auth/api/http/pats/transport.go

@@ -1,366 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package pats
-
-import (
-	"context"
-	"encoding/json"
-	"log/slog"
-	"net/http"
-	"strings"
-
-	api "github.com/absmach/supermq/api/http"
-	apiutil "github.com/absmach/supermq/api/http/util"
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-	"github.com/go-chi/chi/v5"
-	kithttp "github.com/go-kit/kit/transport/http"
-)
-
-const (
-	contentType = "application/json"
-	defInterval = "30d"
-	patPrefix   = "pat_"
-)
-
-// MakeHandler returns a HTTP handler for API endpoints.
-func MakeHandler(svc auth.Service, mux *chi.Mux, logger *slog.Logger) *chi.Mux {
-	opts := []kithttp.ServerOption{
-		kithttp.ServerErrorEncoder(apiutil.LoggingErrorEncoder(logger, api.EncodeError)),
-	}
-	mux.Route("/pats", func(r chi.Router) {
-		r.Post("/", kithttp.NewServer(
-			createPATEndpoint(svc),
-			decodeCreatePATRequest,
-			api.EncodeResponse,
-			opts...,
-		).ServeHTTP)
-
-		r.Get("/", kithttp.NewServer(
-			listPATSEndpoint(svc),
-			decodeListPATSRequest,
-			api.EncodeResponse,
-			opts...,
-		).ServeHTTP)
-
-		r.Delete("/", kithttp.NewServer(
-			clearAllPATEndpoint(svc),
-			decodeClearAllPATRequest,
-			api.EncodeResponse,
-			opts...,
-		).ServeHTTP)
-
-		r.Route("/{id}", func(r chi.Router) {
-			r.Get("/", kithttp.NewServer(
-				retrievePATEndpoint(svc),
-				decodeRetrievePATRequest,
-				api.EncodeResponse,
-				opts...,
-			).ServeHTTP)
-
-			r.Patch("/name", kithttp.NewServer(
-				updatePATNameEndpoint(svc),
-				decodeUpdatePATNameRequest,
-				api.EncodeResponse,
-				opts...,
-			).ServeHTTP)
-
-			r.Patch("/description", kithttp.NewServer(
-				updatePATDescriptionEndpoint(svc),
-				decodeUpdatePATDescriptionRequest,
-				api.EncodeResponse,
-				opts...,
-			).ServeHTTP)
-
-			r.Delete("/", kithttp.NewServer(
-				deletePATEndpoint(svc),
-				decodeDeletePATRequest,
-				api.EncodeResponse,
-				opts...,
-			).ServeHTTP)
-
-			r.Route("/secret", func(r chi.Router) {
-				r.Patch("/reset", kithttp.NewServer(
-					resetPATSecretEndpoint(svc),
-					decodeResetPATSecretRequest,
-					api.EncodeResponse,
-					opts...,
-				).ServeHTTP)
-
-				r.Patch("/revoke", kithttp.NewServer(
-					revokePATSecretEndpoint(svc),
-					decodeRevokePATSecretRequest,
-					api.EncodeResponse,
-					opts...,
-				).ServeHTTP)
-			})
-
-			r.Route("/scope", func(r chi.Router) {
-				r.Patch("/add", kithttp.NewServer(
-					addScopeEndpoint(svc),
-					decodeAddScopeRequest,
-					api.EncodeResponse,
-					opts...,
-				).ServeHTTP)
-
-				r.Get("/", kithttp.NewServer(
-					listScopesEndpoint(svc),
-					decodeListScopeRequest,
-					api.EncodeResponse,
-					opts...,
-				).ServeHTTP)
-
-				r.Patch("/remove", kithttp.NewServer(
-					removeScopeEndpoint(svc),
-					decodeRemoveScopeRequest,
-					api.EncodeResponse,
-					opts...,
-				).ServeHTTP)
-
-				r.Delete("/", kithttp.NewServer(
-					clearAllScopeEndpoint(svc),
-					decodeClearAllScopeRequest,
-					api.EncodeResponse,
-					opts...,
-				).ServeHTTP)
-			})
-		})
-	})
-	return mux
-}
-
-func decodeCreatePATRequest(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	req := createPatReq{token: token}
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, errors.Wrap(err, errors.ErrMalformedEntity))
-	}
-	return req, nil
-}
-
-func decodeRetrievePATRequest(_ context.Context, r *http.Request) (any, error) {
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-
-	req := retrievePatReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}
-	return req, nil
-}
-
-func decodeUpdatePATNameRequest(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	req := updatePatNameReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(errors.ErrMalformedEntity, err)
-	}
-	return req, nil
-}
-
-func decodeUpdatePATDescriptionRequest(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	req := updatePatDescriptionReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(errors.ErrMalformedEntity, err)
-	}
-	return req, nil
-}
-
-func decodeListPATSRequest(_ context.Context, r *http.Request) (any, error) {
-	l, err := apiutil.ReadNumQuery[uint64](r, api.LimitKey, api.DefLimit)
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	o, err := apiutil.ReadNumQuery[uint64](r, api.OffsetKey, api.DefOffset)
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	n, err := apiutil.ReadStringQuery(r, api.NameKey, "")
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	i, err := apiutil.ReadStringQuery(r, api.IDOrder, "")
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	s, err := apiutil.ReadStringQuery(r, api.StatusKey, "")
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	patStatus, err := auth.ToStatus(s)
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-
-	req := listPatsReq{
-		token:  token,
-		limit:  l,
-		offset: o,
-		name:   n,
-		id:     i,
-		status: patStatus,
-	}
-
-	return req, nil
-}
-
-func decodeDeletePATRequest(_ context.Context, r *http.Request) (any, error) {
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	return deletePatReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}, nil
-}
-
-func decodeResetPATSecretRequest(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	req := resetPatSecretReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(errors.ErrMalformedEntity, err)
-	}
-	return req, nil
-}
-
-func decodeRevokePATSecretRequest(_ context.Context, r *http.Request) (any, error) {
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	return revokePatSecretReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}, nil
-}
-
-func decodeClearAllPATRequest(_ context.Context, r *http.Request) (any, error) {
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-
-	return clearAllPATReq{
-		token: token,
-	}, nil
-}
-
-func decodeAddScopeRequest(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-
-	req := addScopeReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}
-
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(errors.ErrMalformedEntity, err)
-	}
-
-	return req, nil
-}
-
-func decodeListScopeRequest(_ context.Context, r *http.Request) (any, error) {
-	l, err := apiutil.ReadNumQuery[uint64](r, api.LimitKey, api.DefLimit)
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	o, err := apiutil.ReadNumQuery[uint64](r, api.OffsetKey, api.DefOffset)
-	if err != nil {
-		return nil, errors.Wrap(apiutil.ErrValidation, err)
-	}
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-	req := listScopesReq{
-		token:  token,
-		limit:  l,
-		offset: o,
-		patID:  chi.URLParam(r, "id"),
-	}
-	return req, nil
-}
-
-func decodeRemoveScopeRequest(_ context.Context, r *http.Request) (any, error) {
-	if !strings.Contains(r.Header.Get("Content-Type"), contentType) {
-		return nil, apiutil.ErrUnsupportedContentType
-	}
-
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-
-	req := removeScopeReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}
-	if err := json.NewDecoder(r.Body).Decode(&req); err != nil {
-		return nil, errors.Wrap(errors.ErrMalformedEntity, err)
-	}
-	return req, nil
-}
-
-func decodeClearAllScopeRequest(_ context.Context, r *http.Request) (any, error) {
-	token := apiutil.ExtractBearerToken(r)
-	if strings.HasPrefix(token, patPrefix) {
-		return nil, apiutil.ErrUnsupportedTokenType
-	}
-
-	return clearAllScopeReq{
-		token: token,
-		id:    chi.URLParam(r, "id"),
-	}, nil
-}

auth/api/http/transport.go

@@ -1,28 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-package http
-
-import (
-	"log/slog"
-	"net/http"
-
-	"github.com/absmach/supermq"
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/auth/api/http/keys"
-	"github.com/absmach/supermq/auth/api/http/pats"
-	"github.com/go-chi/chi/v5"
-	"github.com/prometheus/client_golang/prometheus/promhttp"
-)
-
-// MakeHandler returns a HTTP handler for API endpoints.
-func MakeHandler(svc auth.Service, logger *slog.Logger, instanceID string) http.Handler {
-	mux := chi.NewRouter()
-
-	mux = keys.MakeHandler(svc, mux, logger)
-	mux = pats.MakeHandler(svc, mux, logger)
-
-	mux.Get("/health", supermq.Health("auth", instanceID))
-	mux.Handle("/metrics", promhttp.Handler())
-
-	return mux
-}

auth/cache/doc.go

@@ -1,4 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package cache

auth/cache/pat.go

@@ -1,120 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package cache
-
-import (
-	"context"
-	"fmt"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-	repoerr "github.com/absmach/supermq/pkg/errors/repository"
-	"github.com/redis/go-redis/v9"
-)
-
-type patCache struct {
-	client   *redis.Client
-	duration time.Duration
-}
-
-func NewPatsCache(client *redis.Client, duration time.Duration) auth.Cache {
-	return &patCache{
-		client:   client,
-		duration: duration,
-	}
-}
-
-func (pc *patCache) Save(ctx context.Context, userID string, scopes []auth.Scope) error {
-	for _, sc := range scopes {
-		key := generateKey(userID, sc.PatID, sc.OptionalDomainID, sc.EntityType, sc.Operation, sc.EntityID)
-		if err := pc.client.Set(ctx, key, sc.ID, pc.duration).Err(); err != nil {
-			return errors.Wrap(repoerr.ErrCreateEntity, err)
-		}
-	}
-
-	return nil
-}
-
-func (pc *patCache) CheckScope(ctx context.Context, userID, patID, optionalDomainID string, entityType auth.EntityType, operation auth.Operation, entityID string) bool {
-	exactKey := fmt.Sprintf("pat:%s:%s:%s:%s:%s:%s", userID, patID, entityType, optionalDomainID, operation, entityID)
-	wildcardKey := fmt.Sprintf("pat:%s:%s:%s:%s:%s:*", userID, patID, entityType, operation, operation)
-
-	res, err := pc.client.Exists(ctx, exactKey, wildcardKey).Result()
-	if err != nil {
-		return false
-	}
-
-	return res > 0
-}
-
-func (pc *patCache) Remove(ctx context.Context, userID string, scopeIDs []string) error {
-	if len(scopeIDs) == 0 {
-		return repoerr.ErrRemoveEntity
-	}
-
-	pattern := fmt.Sprintf("pat:%s:*", userID)
-	iter := pc.client.Scan(ctx, 0, pattern, 0).Iterator()
-
-	for iter.Next(ctx) {
-		key := iter.Val()
-		val, err := pc.client.Get(ctx, key).Result()
-		if err != nil {
-			if err == redis.Nil {
-				continue
-			}
-			return errors.Wrap(repoerr.ErrRemoveEntity, err)
-		}
-
-		for _, scopeID := range scopeIDs {
-			if val == scopeID {
-				if err := pc.client.Del(ctx, key).Err(); err != nil {
-					return errors.Wrap(repoerr.ErrRemoveEntity, err)
-				}
-				break
-			}
-		}
-	}
-
-	if err := iter.Err(); err != nil {
-		return errors.Wrap(repoerr.ErrRemoveEntity, err)
-	}
-
-	return nil
-}
-
-func (pc *patCache) RemoveUserAllScope(ctx context.Context, userID string) error {
-	pattern := fmt.Sprintf("pat:%s:*", userID)
-	iter := pc.client.Scan(ctx, 0, pattern, 0).Iterator()
-	for iter.Next(ctx) {
-		if err := pc.client.Del(ctx, iter.Val()).Err(); err != nil {
-			return errors.Wrap(repoerr.ErrRemoveEntity, err)
-		}
-	}
-	if err := iter.Err(); err != nil {
-		return errors.Wrap(repoerr.ErrRemoveEntity, err)
-	}
-	return nil
-}
-
-func (pc *patCache) RemoveAllScope(ctx context.Context, userID, patID string) error {
-	pattern := fmt.Sprintf("pat:%s:%s", userID, patID)
-
-	iter := pc.client.Scan(ctx, 0, pattern, 0).Iterator()
-	for iter.Next(ctx) {
-		if err := pc.client.Del(ctx, iter.Val()).Err(); err != nil {
-			return errors.Wrap(repoerr.ErrRemoveEntity, err)
-		}
-	}
-
-	if err := iter.Err(); err != nil {
-		return errors.Wrap(repoerr.ErrRemoveEntity, err)
-	}
-
-	return nil
-}
-
-func generateKey(userID, patID, optionalDomainId string, entityType auth.EntityType, operation auth.Operation, entityID string) string {
-	return fmt.Sprintf("pat:%s:%s:%s:%s:%s:%s", userID, patID, entityType, optionalDomainId, operation, entityID)
-}

auth/hasher.go

@@ -1,15 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-// Hasher specifies an API for generating hashes of an arbitrary textual
-// content.
-type Hasher interface {
-	// Hash generates the hashed string from plain-text.
-	Hash(string) (string, error)
-
-	// Compare compares plain-text version to the hashed one. An error should
-	// indicate failed comparison.
-	Compare(string, string) error
-}

auth/hasher/doc.go

@@ -1,6 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package hasher contains the domain concept definitions needed to
-// support Supermq users password hasher sub-service functionality.
-package hasher

auth/hasher/hasher.go

@@ -1,86 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package hasher
-
-import (
-	"encoding/base64"
-	"fmt"
-	"math/rand"
-	"strings"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-	"golang.org/x/crypto/scrypt"
-)
-
-var (
-	errHashToken        = errors.New("failed to generate hash for token")
-	errHashCompare      = errors.New("failed to generate hash for given compare string")
-	errToken            = errors.New("given token and hash are not same")
-	errSalt             = errors.New("failed to generate salt")
-	errInvalidHashStore = errors.New("invalid stored hash format")
-	errDecode           = errors.New("failed to decode")
-)
-
-var _ auth.Hasher = (*bcryptHasher)(nil)
-
-type bcryptHasher struct{}
-
-// New instantiates a bcrypt-based hasher implementation.
-func New() auth.Hasher {
-	return &bcryptHasher{}
-}
-
-func (bh *bcryptHasher) Hash(token string) (string, error) {
-	salt, err := generateSalt(25)
-	if err != nil {
-		return "", err
-	}
-	// N is kept 16384 to make faster and added large salt, since PAT will be access by automation scripts in high frequency.
-	hash, err := scrypt.Key([]byte(token), salt, 16384, 8, 1, 32)
-	if err != nil {
-		return "", errors.Wrap(errHashToken, err)
-	}
-
-	return fmt.Sprintf("%s.%s", base64.StdEncoding.EncodeToString(hash), base64.StdEncoding.EncodeToString(salt)), nil
-}
-
-func (bh *bcryptHasher) Compare(plain, hashed string) error {
-	parts := strings.Split(hashed, ".")
-	if len(parts) != 2 {
-		return errInvalidHashStore
-	}
-
-	actHash, err := base64.StdEncoding.DecodeString(parts[0])
-	if err != nil {
-		return errors.Wrap(errDecode, err)
-	}
-
-	salt, err := base64.StdEncoding.DecodeString(parts[1])
-	if err != nil {
-		return errors.Wrap(errDecode, err)
-	}
-
-	derivedHash, err := scrypt.Key([]byte(plain), salt, 16384, 8, 1, 32)
-	if err != nil {
-		return errors.Wrap(errHashCompare, err)
-	}
-
-	if string(derivedHash) == string(actHash) {
-		return nil
-	}
-
-	return errToken
-}
-
-func generateSalt(length int) ([]byte, error) {
-	rand.New(rand.NewSource(time.Now().UTC().UnixNano()))
-	salt := make([]byte, length)
-	_, err := rand.Read(salt)
-	if err != nil {
-		return nil, errors.Wrap(errSalt, err)
-	}
-	return salt, nil
-}

auth/jwt/token_test.go

@@ -1,241 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package jwt_test
-
-import (
-	"fmt"
-	"testing"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	authjwt "github.com/absmach/supermq/auth/jwt"
-	"github.com/absmach/supermq/internal/testsutil"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/lestrrat-go/jwx/v2/jwa"
-	"github.com/lestrrat-go/jwx/v2/jwt"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-const (
-	tokenType  = "type"
-	roleField  = "role"
-	issuerName = "supermq.auth"
-	secret     = "test"
-)
-
-var (
-	errInvalidIssuer = errors.New("invalid token issuer value")
-	reposecret       = []byte("test")
-)
-
-func newToken(issuerName string, key auth.Key) string {
-	builder := jwt.NewBuilder()
-	builder.
-		Issuer(issuerName).
-		IssuedAt(key.IssuedAt).
-		Claim(tokenType, "r").
-		Expiration(key.ExpiresAt)
-	builder.Claim(roleField, key.Role)
-	if key.Subject != "" {
-		builder.Subject(key.Subject)
-	}
-	if key.ID != "" {
-		builder.JwtID(key.ID)
-	}
-	tkn, _ := builder.Build()
-	tokn, _ := jwt.Sign(tkn, jwt.WithKey(jwa.HS512, reposecret))
-	return string(tokn)
-}
-
-func TestIssue(t *testing.T) {
-	tokenizer := authjwt.New([]byte(secret))
-
-	cases := []struct {
-		desc string
-		key  auth.Key
-		err  error
-	}{
-		{
-			desc: "issue new token",
-			key:  key(),
-			err:  nil,
-		},
-		{
-			desc: "issue token with OAuth token",
-			key: auth.Key{
-				ID:        testsutil.GenerateUUID(t),
-				Type:      auth.AccessKey,
-				Subject:   testsutil.GenerateUUID(t),
-				IssuedAt:  time.Now().Add(-10 * time.Second).Round(time.Second),
-				ExpiresAt: time.Now().Add(10 * time.Minute).Round(time.Second),
-			},
-			err: nil,
-		},
-		{
-			desc: "issue token without a domain",
-			key: auth.Key{
-				ID:       testsutil.GenerateUUID(t),
-				Type:     auth.AccessKey,
-				Subject:  testsutil.GenerateUUID(t),
-				IssuedAt: time.Now().Add(-10 * time.Second).Round(time.Second),
-			},
-			err: nil,
-		},
-		{
-			desc: "issue token without a subject",
-			key: auth.Key{
-				ID:       testsutil.GenerateUUID(t),
-				Type:     auth.AccessKey,
-				Subject:  "",
-				IssuedAt: time.Now().Add(-10 * time.Second).Round(time.Second),
-			},
-			err: nil,
-		},
-		{
-			desc: "issue token without type",
-			key: auth.Key{
-				ID:       testsutil.GenerateUUID(t),
-				Type:     auth.KeyType(auth.InvitationKey + 1),
-				Subject:  testsutil.GenerateUUID(t),
-				IssuedAt: time.Now().Add(-10 * time.Second).Round(time.Second),
-			},
-			err: nil,
-		},
-		{
-			desc: "issue token without a domain and subject",
-			key: auth.Key{
-				ID:        testsutil.GenerateUUID(t),
-				Type:      auth.AccessKey,
-				Subject:   "",
-				IssuedAt:  time.Now().Add(-10 * time.Second).Round(time.Second),
-				ExpiresAt: time.Now().Add(10 * time.Minute).Round(time.Second),
-			},
-			err: nil,
-		},
-	}
-	for _, tc := range cases {
-		t.Run(tc.desc, func(t *testing.T) {
-			tkn, err := tokenizer.Issue(tc.key)
-			assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s expected %s, got %s", tc.desc, tc.err, err))
-			if err != nil {
-				assert.NotEmpty(t, tkn, fmt.Sprintf("%s expected token, got empty string", tc.desc))
-			}
-		})
-	}
-}
-
-func TestParse(t *testing.T) {
-	tokenizer := authjwt.New([]byte(secret))
-
-	token, err := tokenizer.Issue(key())
-	require.Nil(t, err, fmt.Sprintf("issuing key expected to succeed: %s", err))
-
-	apiKey := key()
-	apiKey.Type = auth.APIKey
-	apiKey.ExpiresAt = time.Now().UTC().Add(-1 * time.Minute).Round(time.Second)
-	apiToken, err := tokenizer.Issue(apiKey)
-	require.Nil(t, err, fmt.Sprintf("issuing user key expected to succeed: %s", err))
-
-	expKey := key()
-	expKey.ExpiresAt = time.Now().UTC().Add(-1 * time.Minute).Round(time.Second)
-	expToken, err := tokenizer.Issue(expKey)
-	require.Nil(t, err, fmt.Sprintf("issuing expired key expected to succeed: %s", err))
-
-	emptySubjectKey := key()
-	emptySubjectKey.Subject = ""
-	emptySubjectToken, err := tokenizer.Issue(emptySubjectKey)
-	require.Nil(t, err, fmt.Sprintf("issuing user key expected to succeed: %s", err))
-
-	emptyTypeKey := key()
-	emptyTypeKey.Type = auth.KeyType(auth.InvitationKey + 1)
-	emptyTypeToken, err := tokenizer.Issue(emptyTypeKey)
-	require.Nil(t, err, fmt.Sprintf("issuing user key expected to succeed: %s", err))
-
-	emptyKey := key()
-	emptyKey.Subject = ""
-	require.Nil(t, err, fmt.Sprintf("issuing user key expected to succeed: %s", err))
-
-	inValidToken := newToken("invalid", key())
-
-	cases := []struct {
-		desc  string
-		key   auth.Key
-		token string
-		err   error
-	}{
-		{
-			desc:  "parse valid key",
-			key:   key(),
-			token: token,
-			err:   nil,
-		},
-		{
-			desc:  "parse invalid key",
-			key:   auth.Key{},
-			token: "invalid",
-			err:   svcerr.ErrAuthentication,
-		},
-		{
-			desc:  "parse expired key",
-			key:   auth.Key{},
-			token: expToken,
-			err:   auth.ErrExpiry,
-		},
-		{
-			desc:  "parse expired API key",
-			key:   apiKey,
-			token: apiToken,
-			err:   auth.ErrExpiry,
-		},
-		{
-			desc:  "parse token with invalid issuer",
-			key:   auth.Key{},
-			token: inValidToken,
-			err:   errInvalidIssuer,
-		},
-		{
-			desc:  "parse token with invalid content",
-			key:   auth.Key{},
-			token: newToken(issuerName, key()),
-			err:   authjwt.ErrJSONHandle,
-		},
-		{
-			desc:  "parse token with empty subject",
-			key:   emptySubjectKey,
-			token: emptySubjectToken,
-			err:   nil,
-		},
-		{
-			desc:  "parse token with empty type",
-			key:   emptyTypeKey,
-			token: emptyTypeToken,
-			err:   errors.ErrAuthentication,
-		},
-	}
-
-	for _, tc := range cases {
-		t.Run(tc.desc, func(t *testing.T) {
-			key, err := tokenizer.Parse(tc.token)
-			assert.True(t, errors.Contains(err, tc.err), fmt.Sprintf("%s expected %s, got %s", tc.desc, tc.err, err))
-			if err == nil {
-				assert.Equal(t, tc.key, key, fmt.Sprintf("%s expected %v, got %v", tc.desc, tc.key, key))
-			}
-		})
-	}
-}
-
-func key() auth.Key {
-	exp := time.Now().UTC().Add(10 * time.Minute).Round(time.Second)
-	return auth.Key{
-		ID:        "66af4a67-3823-438a-abd7-efdb613eaef6",
-		Type:      auth.AccessKey,
-		Issuer:    "supermq.auth",
-		Role:      auth.UserRole,
-		Subject:   "66af4a67-3823-438a-abd7-efdb613eaef6",
-		IssuedAt:  time.Now().UTC().Add(-10 * time.Second).Round(time.Second),
-		ExpiresAt: exp,
-	}
-}

auth/jwt/tokenizer.go

@@ -1,182 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package jwt
-
-import (
-	"context"
-	"encoding/json"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/errors"
-	svcerr "github.com/absmach/supermq/pkg/errors/service"
-	"github.com/lestrrat-go/jwx/v2/jwa"
-	"github.com/lestrrat-go/jwx/v2/jwt"
-)
-
-var (
-	// errInvalidIssuer is returned when the issuer is not supermq.auth.
-	errInvalidIssuer = errors.New("invalid token issuer value")
-	// errInvalidType is returned when there is no type field.
-	errInvalidType = errors.New("invalid token type")
-	// errInvalidRole is returned when the role is invalid.
-	errInvalidRole = errors.New("invalid role")
-	// errInvalidVerified is returned when the verified is invalid.
-	errInvalidVerified = errors.New("invalid verified")
-	// errJWTExpiryKey is used to check if the token is expired.
-	errJWTExpiryKey = errors.New(`"exp" not satisfied`)
-	// ErrSignJWT indicates an error in signing jwt token.
-	ErrSignJWT = errors.New("failed to sign jwt token")
-	// ErrValidateJWTToken indicates a failure to validate JWT token.
-	ErrValidateJWTToken = errors.New("failed to validate jwt token")
-	// ErrJSONHandle indicates an error in handling JSON.
-	ErrJSONHandle = errors.New("failed to perform operation JSON")
-)
-
-const (
-	issuerName             = "supermq.auth"
-	tokenType              = "type"
-	userField              = "user"
-	RoleField              = "role"
-	VerifiedField          = "verified"
-	oauthProviderField     = "oauth_provider"
-	oauthAccessTokenField  = "access_token"
-	oauthRefreshTokenField = "refresh_token"
-)
-
-type tokenizer struct {
-	secret []byte
-}
-
-var _ auth.Tokenizer = (*tokenizer)(nil)
-
-// NewRepository instantiates an implementation of Token repository.
-func New(secret []byte) auth.Tokenizer {
-	return &tokenizer{
-		secret: secret,
-	}
-}
-
-func (tok *tokenizer) Issue(key auth.Key) (string, error) {
-	builder := jwt.NewBuilder()
-	builder.
-		Issuer(issuerName).
-		IssuedAt(key.IssuedAt).
-		Claim(tokenType, key.Type).
-		Expiration(key.ExpiresAt)
-	builder.Claim(RoleField, key.Role)
-	builder.Claim(VerifiedField, key.Verified)
-	if key.Subject != "" {
-		builder.Subject(key.Subject)
-	}
-	if key.ID != "" {
-		builder.JwtID(key.ID)
-	}
-	tkn, err := builder.Build()
-	if err != nil {
-		return "", errors.Wrap(svcerr.ErrAuthentication, err)
-	}
-	signedTkn, err := jwt.Sign(tkn, jwt.WithKey(jwa.HS512, tok.secret))
-	if err != nil {
-		return "", errors.Wrap(ErrSignJWT, err)
-	}
-	return string(signedTkn), nil
-}
-
-func (tok *tokenizer) Parse(token string) (auth.Key, error) {
-	tkn, err := tok.validateToken(token)
-	if err != nil {
-		return auth.Key{}, errors.Wrap(svcerr.ErrAuthentication, err)
-	}
-
-	key, err := toKey(tkn)
-	if err != nil {
-		return auth.Key{}, errors.Wrap(svcerr.ErrAuthentication, err)
-	}
-
-	return key, nil
-}
-
-func (tok *tokenizer) validateToken(token string) (jwt.Token, error) {
-	tkn, err := jwt.Parse(
-		[]byte(token),
-		jwt.WithValidate(true),
-		jwt.WithKey(jwa.HS512, tok.secret),
-	)
-	if err != nil {
-		if errors.Contains(err, errJWTExpiryKey) {
-			return nil, auth.ErrExpiry
-		}
-
-		return nil, err
-	}
-	validator := jwt.ValidatorFunc(func(_ context.Context, t jwt.Token) jwt.ValidationError {
-		if t.Issuer() != issuerName {
-			return jwt.NewValidationError(errInvalidIssuer)
-		}
-		return nil
-	})
-	if err := jwt.Validate(tkn, jwt.WithValidator(validator)); err != nil {
-		return nil, errors.Wrap(ErrValidateJWTToken, err)
-	}
-
-	return tkn, nil
-}
-
-func toKey(tkn jwt.Token) (auth.Key, error) {
-	data, err := json.Marshal(tkn.PrivateClaims())
-	if err != nil {
-		return auth.Key{}, errors.Wrap(ErrJSONHandle, err)
-	}
-	var key auth.Key
-	if err := json.Unmarshal(data, &key); err != nil {
-		return auth.Key{}, errors.Wrap(ErrJSONHandle, err)
-	}
-
-	tType, ok := tkn.Get(tokenType)
-	if !ok {
-		return auth.Key{}, errInvalidType
-	}
-	kType, ok := tType.(float64)
-	if !ok {
-		return auth.Key{}, errInvalidType
-	}
-	kt := auth.KeyType(kType)
-	if !kt.Validate() {
-		return auth.Key{}, errInvalidType
-	}
-
-	tRole, ok := tkn.Get(RoleField)
-	if !ok {
-		return auth.Key{}, errInvalidRole
-	}
-	kRole, ok := tRole.(float64)
-	if !ok {
-		return auth.Key{}, errInvalidRole
-	}
-
-	tVerified, ok := tkn.Get(VerifiedField)
-	if !ok {
-		return auth.Key{}, errInvalidVerified
-	}
-	kVerified, ok := tVerified.(bool)
-	if !ok {
-		return auth.Key{}, errInvalidVerified
-	}
-
-	kr := auth.Role(kRole)
-	if !kr.Validate() {
-		return auth.Key{}, errInvalidRole
-	}
-
-	key.ID = tkn.JwtID()
-	key.Type = auth.KeyType(kType)
-	key.Role = auth.Role(kRole)
-	key.Issuer = tkn.Issuer()
-	key.Subject = tkn.Subject()
-	key.IssuedAt = tkn.IssuedAt()
-	key.ExpiresAt = tkn.Expiration()
-	key.Verified = kVerified
-
-	return key, nil
-}

auth/keys.go

@@ -1,125 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth
-
-import (
-	"context"
-	"errors"
-	"fmt"
-	"time"
-)
-
-// ErrKeyExpired indicates that the Key is expired.
-var ErrKeyExpired = errors.New("use of expired key")
-
-type Token struct {
-	AccessToken  string // AccessToken contains the security credentials for a login session and identifies the client.
-	RefreshToken string // RefreshToken is a credential artifact that OAuth can use to get a new access token without client interaction.
-	AccessType   string // AccessType is the specific type of access token issued. It can be Bearer, Client or Basic.
-}
-
-type KeyType uint32
-
-const (
-	// AccessKey is temporary User key received on successful login.
-	AccessKey KeyType = iota
-	// RefreshKey is a temporary User key used to generate a new access key.
-	RefreshKey
-	// RecoveryKey represents a key for resseting password.
-	RecoveryKey
-	// APIKey enables the one to act on behalf of the user.
-	APIKey
-	// PersonalAccessToken represents token generated by user for automation.
-	PersonalAccessToken
-	// InvitationKey is a key for inviting new users.
-	InvitationKey
-)
-
-func (kt KeyType) Validate() bool {
-	return AccessKey <= kt && kt <= InvitationKey
-}
-
-func (kt KeyType) String() string {
-	switch kt {
-	case AccessKey:
-		return "access"
-	case RefreshKey:
-		return "refresh"
-	case RecoveryKey:
-		return "recovery"
-	case APIKey:
-		return "API"
-	case PersonalAccessToken:
-		return "pat"
-	default:
-		return "unknown"
-	}
-}
-
-type Role uint32
-
-const (
-	UserRole Role = iota + 1
-	AdminRole
-)
-
-func (r Role) String() string {
-	switch r {
-	case UserRole:
-		return "user"
-	case AdminRole:
-		return "admin"
-	default:
-		return "unknown"
-	}
-}
-
-func (r Role) Validate() bool {
-	return UserRole <= r && r <= AdminRole
-}
-
-// Key represents API key.
-type Key struct {
-	ID        string    `json:"id,omitempty"`
-	Type      KeyType   `json:"type,omitempty"`
-	Issuer    string    `json:"issuer,omitempty"`
-	Subject   string    `json:"subject,omitempty"` // user ID
-	Role      Role      `json:"role,omitempty"`
-	IssuedAt  time.Time `json:"issued_at,omitempty"`
-	ExpiresAt time.Time `json:"expires_at,omitempty"`
-	Verified  bool      `json:"verified,omitempty"`
-}
-
-func (key Key) String() string {
-	return fmt.Sprintf(`{
-	id: %s,
-	type: %s,
-	issuer_id: %s,
-	subject: %s,
-	role: %s,
-	iat: %v,
-	eat: %v
-}`, key.ID, key.Type, key.Issuer, key.Subject, key.Role, key.IssuedAt, key.ExpiresAt)
-}
-
-// Expired verifies if the key is expired.
-func (key Key) Expired() bool {
-	if key.Type == APIKey && key.ExpiresAt.IsZero() {
-		return false
-	}
-	return key.ExpiresAt.UTC().Before(time.Now().UTC())
-}
-
-// KeyRepository specifies Key persistence API.
-type KeyRepository interface {
-	// Save persists the Key. A non-nil error is returned to indicate
-	// operation failure
-	Save(ctx context.Context, key Key) (id string, err error)
-
-	// Retrieve retrieves Key by its unique identifier.
-	Retrieve(ctx context.Context, issuer string, id string) (key Key, err error)
-
-	// Remove removes Key with provided ID.
-	Remove(ctx context.Context, issuer string, id string) error
-}

auth/keys_test.go

@@ -1,60 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package auth_test
-
-import (
-	"fmt"
-	"testing"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/stretchr/testify/assert"
-)
-
-func TestExpired(t *testing.T) {
-	exp := time.Now().Add(5 * time.Minute)
-	exp1 := time.Now()
-	cases := []struct {
-		desc    string
-		key     auth.Key
-		expired bool
-	}{
-		{
-			desc: "not expired key",
-			key: auth.Key{
-				IssuedAt:  time.Now(),
-				ExpiresAt: exp,
-			},
-			expired: false,
-		},
-		{
-			desc: "expired key",
-			key: auth.Key{
-				IssuedAt:  time.Now().UTC().Add(2 * time.Minute),
-				ExpiresAt: exp1,
-			},
-			expired: true,
-		},
-		{
-			desc: "user key with no expiration date",
-			key: auth.Key{
-				IssuedAt: time.Now(),
-			},
-			expired: true,
-		},
-		{
-			desc: "API key with no expiration date",
-			key: auth.Key{
-				IssuedAt: time.Now(),
-				Type:     auth.APIKey,
-			},
-			expired: false,
-		},
-	}
-
-	for _, tc := range cases {
-		res := tc.key.Expired()
-		assert.Equal(t, tc.expired, res, fmt.Sprintf("%s: expected %t got %t\n", tc.desc, tc.expired, res))
-	}
-}

auth/middleware/doc.go

@@ -1,9 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-// Package middleware provides logging metrics and tracing middleware
-// for SuperMQ Auth service.
-//
-// For more details about tracing instrumentation for SuperMQ refer to the
-// documentation at https://docs.supermq.abstractmachines.fr/tracing/.
-package middleware

auth/middleware/logging.go

@@ -1,389 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-//go:build !test
-
-package middleware
-
-import (
-	"context"
-	"log/slog"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/policies"
-)
-
-var _ auth.Service = (*loggingMiddleware)(nil)
-
-type loggingMiddleware struct {
-	logger *slog.Logger
-	svc    auth.Service
-}
-
-// NewLogging adds logging facilities to the core service.
-func NewLogging(svc auth.Service, logger *slog.Logger) auth.Service {
-	return &loggingMiddleware{logger, svc}
-}
-
-func (lm *loggingMiddleware) Issue(ctx context.Context, token string, key auth.Key) (tkn auth.Token, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.Group("key",
-				slog.String("subject", key.Subject),
-				slog.String("type", key.Type.String()),
-			),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Issue key failed", args...)
-			return
-		}
-		lm.logger.Info("Issue key completed successfully", args...)
-	}(time.Now())
-
-	return lm.svc.Issue(ctx, token, key)
-}
-
-func (lm *loggingMiddleware) Revoke(ctx context.Context, token, id string) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("key_id", id),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Revoke key failed", args...)
-			return
-		}
-		lm.logger.Info("Revoke key completed successfully", args...)
-	}(time.Now())
-
-	return lm.svc.Revoke(ctx, token, id)
-}
-
-func (lm *loggingMiddleware) RetrieveKey(ctx context.Context, token, id string) (key auth.Key, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("key_id", id),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Retrieve key failed", args...)
-			return
-		}
-		lm.logger.Info("Retrieve key completed successfully", args...)
-	}(time.Now())
-
-	return lm.svc.RetrieveKey(ctx, token, id)
-}
-
-func (lm *loggingMiddleware) Identify(ctx context.Context, token string) (id auth.Key, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.Group("key",
-				slog.String("subject", id.Subject),
-				slog.String("type", id.Type.String()),
-			),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Identify key failed", args...)
-			return
-		}
-		lm.logger.Info("Identify key completed successfully", args...)
-	}(time.Now())
-
-	return lm.svc.Identify(ctx, token)
-}
-
-func (lm *loggingMiddleware) Authorize(ctx context.Context, pr policies.Policy) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.Group("object",
-				slog.String("id", pr.Object),
-				slog.String("type", pr.ObjectType),
-			),
-			slog.Group("subject",
-				slog.String("id", pr.Subject),
-				slog.String("kind", pr.SubjectKind),
-				slog.String("type", pr.SubjectType),
-			),
-			slog.String("permission", pr.Permission),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Authorize failed", args...)
-			return
-		}
-		lm.logger.Info("Authorize completed successfully", args...)
-	}(time.Now())
-	return lm.svc.Authorize(ctx, pr)
-}
-
-func (lm *loggingMiddleware) CreatePAT(ctx context.Context, token, name, description string, duration time.Duration) (pa auth.PAT, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("name", name),
-			slog.String("description", description),
-			slog.String("pat_duration", duration.String()),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Create PAT failed", args...)
-			return
-		}
-		lm.logger.Info("Create PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.CreatePAT(ctx, token, name, description, duration)
-}
-
-func (lm *loggingMiddleware) UpdatePATName(ctx context.Context, token, patID, name string) (pa auth.PAT, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-			slog.String("name", name),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Update PAT name failed", args...)
-			return
-		}
-		lm.logger.Info("Update PAT name completed successfully", args...)
-	}(time.Now())
-	return lm.svc.UpdatePATName(ctx, token, patID, name)
-}
-
-func (lm *loggingMiddleware) UpdatePATDescription(ctx context.Context, token, patID, description string) (pa auth.PAT, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-			slog.String("description", description),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Update PAT description failed", args...)
-			return
-		}
-		lm.logger.Info("Update PAT description completed successfully", args...)
-	}(time.Now())
-	return lm.svc.UpdatePATDescription(ctx, token, patID, description)
-}
-
-func (lm *loggingMiddleware) RetrievePAT(ctx context.Context, token, patID string) (pa auth.PAT, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Retrieve PAT  failed", args...)
-			return
-		}
-		lm.logger.Info("Retrieve PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.RetrievePAT(ctx, token, patID)
-}
-
-func (lm *loggingMiddleware) ListPATS(ctx context.Context, token string, pm auth.PATSPageMeta) (pp auth.PATSPage, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.Uint64("limit", pm.Limit),
-			slog.Uint64("offset", pm.Offset),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("List PATS  failed", args...)
-			return
-		}
-		lm.logger.Info("List PATS completed successfully", args...)
-	}(time.Now())
-	return lm.svc.ListPATS(ctx, token, pm)
-}
-
-func (lm *loggingMiddleware) ListScopes(ctx context.Context, token string, pm auth.ScopesPageMeta) (pp auth.ScopesPage, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.Uint64("limit", pm.Limit),
-			slog.Uint64("offset", pm.Offset),
-			slog.String("pat_id", pm.PatID),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("List Scopes  failed", args...)
-			return
-		}
-		lm.logger.Info("List Scopes completed successfully", args...)
-	}(time.Now())
-	return lm.svc.ListScopes(ctx, token, pm)
-}
-
-func (lm *loggingMiddleware) DeletePAT(ctx context.Context, token, patID string) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Delete PAT  failed", args...)
-			return
-		}
-		lm.logger.Info("Delete PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.DeletePAT(ctx, token, patID)
-}
-
-func (lm *loggingMiddleware) ResetPATSecret(ctx context.Context, token, patID string, duration time.Duration) (pa auth.PAT, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-			slog.String("pat_duration", duration.String()),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Reset PAT secret failed", args...)
-			return
-		}
-		lm.logger.Info("Reset PAT secret completed successfully", args...)
-	}(time.Now())
-	return lm.svc.ResetPATSecret(ctx, token, patID, duration)
-}
-
-func (lm *loggingMiddleware) RevokePATSecret(ctx context.Context, token, patID string) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Revoke PAT secret failed", args...)
-			return
-		}
-		lm.logger.Info("Revoke PAT secret completed successfully", args...)
-	}(time.Now())
-	return lm.svc.RevokePATSecret(ctx, token, patID)
-}
-
-func (lm *loggingMiddleware) RemoveAllPAT(ctx context.Context, token string) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Remove all PAT failed", args...)
-			return
-		}
-		lm.logger.Info("Remove all of PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.RemoveAllPAT(ctx, token)
-}
-
-func (lm *loggingMiddleware) AddScope(ctx context.Context, token, patID string, scopes []auth.Scope) (err error) {
-	defer func(begin time.Time) {
-		var groupArgs []any
-		for _, s := range scopes {
-			groupArgs = append(groupArgs, slog.String("entity_type", s.EntityType.String()))
-			groupArgs = append(groupArgs, slog.String("optional_domain_id", s.OptionalDomainID))
-			groupArgs = append(groupArgs, slog.String("operation", s.Operation.String()))
-			groupArgs = append(groupArgs, slog.String("entity_id", s.EntityID))
-		}
-
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-			slog.Group("scope", groupArgs...),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Add PAT scope failed", args...)
-			return
-		}
-		lm.logger.Info("Add PAT scope completed successfully", args...)
-	}(time.Now())
-	return lm.svc.AddScope(ctx, token, patID, scopes)
-}
-
-func (lm *loggingMiddleware) RemoveScope(ctx context.Context, token, patID string, scopesID ...string) (err error) {
-	defer func(begin time.Time) {
-		var groupArgs []any
-		for _, s := range scopesID {
-			groupArgs = append(groupArgs, slog.String("scope_id", s))
-		}
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-			slog.Group("scope", groupArgs...),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Remove entry from PAT scope failed", args...)
-			return
-		}
-		lm.logger.Info("Remove entry from PAT scope completed successfully", args...)
-	}(time.Now())
-	return lm.svc.RemoveScope(ctx, token, patID, scopesID...)
-}
-
-func (lm *loggingMiddleware) RemovePATAllScope(ctx context.Context, token, patID string) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("pat_id", patID),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Remove all scopes from PAT failed", args...)
-			return
-		}
-		lm.logger.Info("Remove all scopes from PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.RemovePATAllScope(ctx, token, patID)
-}
-
-func (lm *loggingMiddleware) IdentifyPAT(ctx context.Context, paToken string) (pa auth.PAT, err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Identify PAT failed", args...)
-			return
-		}
-		lm.logger.Info("Identify PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.IdentifyPAT(ctx, paToken)
-}
-
-func (lm *loggingMiddleware) AuthorizePAT(ctx context.Context, userID, patID string, entityType auth.EntityType, optionalDomainID string, operation auth.Operation, entityID string) (err error) {
-	defer func(begin time.Time) {
-		args := []any{
-			slog.String("duration", time.Since(begin).String()),
-			slog.String("entity_type", entityType.String()),
-			slog.String("optional_domain_id", optionalDomainID),
-			slog.String("operation", operation.String()),
-			slog.String("entities", entityID),
-		}
-		if err != nil {
-			args = append(args, slog.String("error", err.Error()))
-			lm.logger.Warn("Authorize PAT failed complete successfully", args...)
-			return
-		}
-		lm.logger.Info("Authorize PAT completed successfully", args...)
-	}(time.Now())
-	return lm.svc.AuthorizePAT(ctx, userID, patID, entityType, optionalDomainID, operation, entityID)
-}

auth/middleware/metrics.go

@@ -1,196 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-//go:build !test
-
-package middleware
-
-import (
-	"context"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/policies"
-	"github.com/go-kit/kit/metrics"
-)
-
-var _ auth.Service = (*metricsMiddleware)(nil)
-
-type metricsMiddleware struct {
-	counter metrics.Counter
-	latency metrics.Histogram
-	svc     auth.Service
-}
-
-// NewMetrics instruments core service by tracking request count and latency.
-func NewMetrics(svc auth.Service, counter metrics.Counter, latency metrics.Histogram) auth.Service {
-	return &metricsMiddleware{
-		counter: counter,
-		latency: latency,
-		svc:     svc,
-	}
-}
-
-func (ms *metricsMiddleware) Issue(ctx context.Context, token string, key auth.Key) (auth.Token, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "issue_key").Add(1)
-		ms.latency.With("method", "issue_key").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-
-	return ms.svc.Issue(ctx, token, key)
-}
-
-func (ms *metricsMiddleware) Revoke(ctx context.Context, token, id string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "revoke_key").Add(1)
-		ms.latency.With("method", "revoke_key").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-
-	return ms.svc.Revoke(ctx, token, id)
-}
-
-func (ms *metricsMiddleware) RetrieveKey(ctx context.Context, token, id string) (auth.Key, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "retrieve_key").Add(1)
-		ms.latency.With("method", "retrieve_key").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-
-	return ms.svc.RetrieveKey(ctx, token, id)
-}
-
-func (ms *metricsMiddleware) Identify(ctx context.Context, token string) (auth.Key, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "identify").Add(1)
-		ms.latency.With("method", "identify").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-
-	return ms.svc.Identify(ctx, token)
-}
-
-func (ms *metricsMiddleware) Authorize(ctx context.Context, pr policies.Policy) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "authorize").Add(1)
-		ms.latency.With("method", "authorize").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.Authorize(ctx, pr)
-}
-
-func (ms *metricsMiddleware) CreatePAT(ctx context.Context, token, name, description string, duration time.Duration) (auth.PAT, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "create_pat").Add(1)
-		ms.latency.With("method", "create_pat").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.CreatePAT(ctx, token, name, description, duration)
-}
-
-func (ms *metricsMiddleware) UpdatePATName(ctx context.Context, token, patID, name string) (auth.PAT, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "update_pat_name").Add(1)
-		ms.latency.With("method", "update_pat_name").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.UpdatePATName(ctx, token, patID, name)
-}
-
-func (ms *metricsMiddleware) UpdatePATDescription(ctx context.Context, token, patID, description string) (auth.PAT, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "update_pat_description").Add(1)
-		ms.latency.With("method", "update_pat_description").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.UpdatePATDescription(ctx, token, patID, description)
-}
-
-func (ms *metricsMiddleware) RetrievePAT(ctx context.Context, token, patID string) (auth.PAT, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "retrieve_pat").Add(1)
-		ms.latency.With("method", "retrieve_pat").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.RetrievePAT(ctx, token, patID)
-}
-
-func (ms *metricsMiddleware) ListPATS(ctx context.Context, token string, pm auth.PATSPageMeta) (auth.PATSPage, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "list_pats").Add(1)
-		ms.latency.With("method", "list_pats").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.ListPATS(ctx, token, pm)
-}
-
-func (ms *metricsMiddleware) ListScopes(ctx context.Context, token string, pm auth.ScopesPageMeta) (auth.ScopesPage, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "list_scopes").Add(1)
-		ms.latency.With("method", "list_scopes").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.ListScopes(ctx, token, pm)
-}
-
-func (ms *metricsMiddleware) DeletePAT(ctx context.Context, token, patID string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "delete_pat").Add(1)
-		ms.latency.With("method", "delete_pat").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.DeletePAT(ctx, token, patID)
-}
-
-func (ms *metricsMiddleware) ResetPATSecret(ctx context.Context, token, patID string, duration time.Duration) (auth.PAT, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "reset_pat_secret").Add(1)
-		ms.latency.With("method", "reset_pat_secret").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.ResetPATSecret(ctx, token, patID, duration)
-}
-
-func (ms *metricsMiddleware) RevokePATSecret(ctx context.Context, token, patID string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "revoke_pat_secret").Add(1)
-		ms.latency.With("method", "revoke_pat_secret").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.RevokePATSecret(ctx, token, patID)
-}
-
-func (ms *metricsMiddleware) RemoveAllPAT(ctx context.Context, token string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "clear_all_pat").Add(1)
-		ms.latency.With("method", "clear_all_pat").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.RemoveAllPAT(ctx, token)
-}
-
-func (ms *metricsMiddleware) AddScope(ctx context.Context, token, patID string, scopes []auth.Scope) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "add_pat_scope").Add(1)
-		ms.latency.With("method", "add_pat_scope").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.AddScope(ctx, token, patID, scopes)
-}
-
-func (ms *metricsMiddleware) RemoveScope(ctx context.Context, token, patID string, scopesID ...string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "remove_pat_scope").Add(1)
-		ms.latency.With("method", "remove_pat_scope").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.RemoveScope(ctx, token, patID, scopesID...)
-}
-
-func (ms *metricsMiddleware) RemovePATAllScope(ctx context.Context, token, patID string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "clear_pat_all_scope").Add(1)
-		ms.latency.With("method", "clear_pat_all_scope").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.RemovePATAllScope(ctx, token, patID)
-}
-
-func (ms *metricsMiddleware) IdentifyPAT(ctx context.Context, paToken string) (auth.PAT, error) {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "identify_pat").Add(1)
-		ms.latency.With("method", "identify_pat").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.IdentifyPAT(ctx, paToken)
-}
-
-func (ms *metricsMiddleware) AuthorizePAT(ctx context.Context, userID, patID string, entityType auth.EntityType, optionalDomainID string, operation auth.Operation, entityID string) error {
-	defer func(begin time.Time) {
-		ms.counter.With("method", "authorize_pat").Add(1)
-		ms.latency.With("method", "authorize_pat").Observe(time.Since(begin).Seconds())
-	}(time.Now())
-	return ms.svc.AuthorizePAT(ctx, userID, patID, entityType, optionalDomainID, operation, entityID)
-}

auth/middleware/tracing.go

@@ -1,217 +0,0 @@
-// Copyright (c) Abstract Machines
-// SPDX-License-Identifier: Apache-2.0
-
-package middleware
-
-import (
-	"context"
-	"fmt"
-	"time"
-
-	"github.com/absmach/supermq/auth"
-	"github.com/absmach/supermq/pkg/policies"
-	"go.opentelemetry.io/otel/attribute"
-	"go.opentelemetry.io/otel/trace"
-)
-
-var _ auth.Service = (*tracingMiddleware)(nil)
-
-type tracingMiddleware struct {
-	tracer trace.Tracer
-	svc    auth.Service
-}
-
-// NewTracing returns a new auth service with tracing capabilities.
-func NewTracing(svc auth.Service, tracer trace.Tracer) auth.Service {
-	return &tracingMiddleware{tracer, svc}
-}
-
-func (tm *tracingMiddleware) Issue(ctx context.Context, token string, key auth.Key) (auth.Token, error) {
-	ctx, span := tm.tracer.Start(ctx, "issue", trace.WithAttributes(
-		attribute.String("type", fmt.Sprintf("%d", key.Type)),
-		attribute.String("subject", key.Subject),
-	))
-	defer span.End()
-
-	return tm.svc.Issue(ctx, token, key)
-}
-
-func (tm *tracingMiddleware) Revoke(ctx context.Context, token, id string) error {
-	ctx, span := tm.tracer.Start(ctx, "revoke", trace.WithAttributes(
-		attribute.String("id", id),
-	))
-	defer span.End()
-
-	return tm.svc.Revoke(ctx, token, id)
-}
-
-func (tm *tracingMiddleware) RetrieveKey(ctx context.Context, token, id string) (auth.Key, error) {
-	ctx, span := tm.tracer.Start(ctx, "retrieve_key", trace.WithAttributes(
-		attribute.String("id", id),
-	))
-	defer span.End()
-
-	return tm.svc.RetrieveKey(ctx, token, id)
-}
-
-func (tm *tracingMiddleware) Identify(ctx context.Context, token string) (auth.Key, error) {
-	ctx, span := tm.tracer.Start(ctx, "identify")
-	defer span.End()
-
-	return tm.svc.Identify(ctx, token)
-}
-
-func (tm *tracingMiddleware) Authorize(ctx context.Context, pr policies.Policy) error {
-	ctx, span := tm.tracer.Start(ctx, "authorize", trace.WithAttributes(
-		attribute.String("subject", pr.Subject),
-		attribute.String("subject_type", pr.SubjectType),
-		attribute.String("subject_relation", pr.SubjectRelation),
-		attribute.String("object", pr.Object),
-		attribute.String("object_type", pr.ObjectType),
-		attribute.String("relation", pr.Relation),
-		attribute.String("permission", pr.Permission),
-	))
-	defer span.End()
-
-	return tm.svc.Authorize(ctx, pr)
-}
-
-func (tm *tracingMiddleware) CreatePAT(ctx context.Context, token, name, description string, duration time.Duration) (auth.PAT, error) {
-	ctx, span := tm.tracer.Start(ctx, "create_pat", trace.WithAttributes(
-		attribute.String("name", name),
-		attribute.String("description", description),
-		attribute.String("duration", duration.String()),
-	))
-	defer span.End()
-	return tm.svc.CreatePAT(ctx, token, name, description, duration)
-}
-
-func (tm *tracingMiddleware) UpdatePATName(ctx context.Context, token, patID, name string) (auth.PAT, error) {
-	ctx, span := tm.tracer.Start(ctx, "update_pat_name", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-		attribute.String("name", name),
-	))
-	defer span.End()
-	return tm.svc.UpdatePATName(ctx, token, patID, name)
-}
-
-func (tm *tracingMiddleware) UpdatePATDescription(ctx context.Context, token, patID, description string) (auth.PAT, error) {
-	ctx, span := tm.tracer.Start(ctx, "update_pat_description", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-		attribute.String("description", description),
-	))
-	defer span.End()
-	return tm.svc.UpdatePATDescription(ctx, token, patID, description)
-}
-
-func (tm *tracingMiddleware) RetrievePAT(ctx context.Context, token, patID string) (auth.PAT, error) {
-	ctx, span := tm.tracer.Start(ctx, "retrieve_pat", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-	))
-	defer span.End()
-	return tm.svc.RetrievePAT(ctx, token, patID)
-}
-
-func (tm *tracingMiddleware) ListPATS(ctx context.Context, token string, pm auth.PATSPageMeta) (auth.PATSPage, error) {
-	ctx, span := tm.tracer.Start(ctx, "list_pat", trace.WithAttributes(
-		attribute.Int64("limit", int64(pm.Limit)),
-		attribute.Int64("offset", int64(pm.Offset)),
-	))
-	defer span.End()
-	return tm.svc.ListPATS(ctx, token, pm)
-}
-
-func (tm *tracingMiddleware) ListScopes(ctx context.Context, token string, pm auth.ScopesPageMeta) (auth.ScopesPage, error) {
-	ctx, span := tm.tracer.Start(ctx, "list_scopes", trace.WithAttributes(
-		attribute.Int64("limit", int64(pm.Limit)),
-		attribute.Int64("offset", int64(pm.Offset)),
-	))
-	defer span.End()
-	return tm.svc.ListScopes(ctx, token, pm)
-}
-
-func (tm *tracingMiddleware) DeletePAT(ctx context.Context, token, patID string) error {
-	ctx, span := tm.tracer.Start(ctx, "delete_pat", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-	))
-	defer span.End()
-	return tm.svc.DeletePAT(ctx, token, patID)
-}
-
-func (tm *tracingMiddleware) ResetPATSecret(ctx context.Context, token, patID string, duration time.Duration) (auth.PAT, error) {
-	ctx, span := tm.tracer.Start(ctx, "reset_pat_secret", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-		attribute.String("duration", duration.String()),
-	))
-	defer span.End()
-	return tm.svc.ResetPATSecret(ctx, token, patID, duration)
-}
-
-func (tm *tracingMiddleware) RevokePATSecret(ctx context.Context, token, patID string) error {
-	ctx, span := tm.tracer.Start(ctx, "revoke_pat_secret", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-	))
-	defer span.End()
-	return tm.svc.RevokePATSecret(ctx, token, patID)
-}
-
-func (tm *tracingMiddleware) RemoveAllPAT(ctx context.Context, token string) error {
-	ctx, span := tm.tracer.Start(ctx, "clear_all_pat")
-	defer span.End()
-	return tm.svc.RemoveAllPAT(ctx, token)
-}
-
-func (tm *tracingMiddleware) AddScope(ctx context.Context, token, patID string, scopes []auth.Scope) error {
-	var attributes []attribute.KeyValue
-	for _, s := range scopes {
-		attributes = append(attributes, attribute.String("entity_type", s.EntityType.String()))
-		attributes = append(attributes, attribute.String("optional_domain_id", s.OptionalDomainID))
-		attributes = append(attributes, attribute.String("operation", s.Operation.String()))
-		attributes = append(attributes, attribute.String("entity_id", s.EntityID))
-	}
-
-	attributes = append(attributes, attribute.String("pat_id", patID))
-
-	ctx, span := tm.tracer.Start(ctx, "add_pat_scope", trace.WithAttributes(attributes...))
-	defer span.End()
-	return tm.svc.AddScope(ctx, token, patID, scopes)
-}
-
-func (tm *tracingMiddleware) RemoveScope(ctx context.Context, token, patID string, scopesID ...string) error {
-	var attributes []attribute.KeyValue
-	for _, s := range scopesID {
-		attributes = append(attributes, attribute.String("scope_id", s))
-	}
-
-	attributes = append(attributes, attribute.String("pat_id", patID))
-
-	ctx, span := tm.tracer.Start(ctx, "remove_pat_scope", trace.WithAttributes(attributes...))
-	defer span.End()
-	return tm.svc.RemoveScope(ctx, token, patID, scopesID...)
-}
-
-func (tm *tracingMiddleware) RemovePATAllScope(ctx context.Context, token, patID string) error {
-	ctx, span := tm.tracer.Start(ctx, "clear_pat_all_scope", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-	))
-	defer span.End()
-	return tm.svc.RemovePATAllScope(ctx, token, patID)
-}
-
-func (tm *tracingMiddleware) IdentifyPAT(ctx context.Context, paToken string) (auth.PAT, error) {
-	ctx, span := tm.tracer.Start(ctx, "identity_pat")
-	defer span.End()
-	return tm.svc.IdentifyPAT(ctx, paToken)
-}
-
-func (tm *tracingMiddleware) AuthorizePAT(ctx context.Context, userID, patID string, entityType auth.EntityType, optionalDomainID string, operation auth.Operation, entityID string) error {
-	ctx, span := tm.tracer.Start(ctx, "authorize_pat", trace.WithAttributes(
-		attribute.String("pat_id", patID),
-		attribute.String("entity_type", entityType.String()),
-		attribute.String("optional_domain_id", optionalDomainID),
-		attribute.String("operation", operation.String()),
-		attribute.String("entities", entityID),
-	))
-	defer span.End()
-	return tm.svc.AuthorizePAT(ctx, userID, patID, entityType, optionalDomainID, operation, entityID)
-}

auth/mocks/authz.go

@@ -1,100 +0,0 @@
-// Copyright (c) Abstract Machines
-
-// SPDX-License-Identifier: Apache-2.0
-
-// Code generated by mockery; DO NOT EDIT.
-// github.com/vektra/mockery
-// template: testify
-
-package mocks
-
-import (
-	"context"
-
-	"github.com/absmach/supermq/pkg/policies"
-	mock "github.com/stretchr/testify/mock"
-)
-
-// NewAuthz creates a new instance of Authz. It also registers a testing interface on the mock and a cleanup function to assert the mocks expectations.
-// The first argument is typically a *testing.T value.
-func NewAuthz(t interface {
-	mock.TestingT
-	Cleanup(func())
-}) *Authz {
-	mock := &Authz{}
-	mock.Mock.Test(t)
-
-	t.Cleanup(func() { mock.AssertExpectations(t) })
-
-	return mock
-}
-
-// Authz is an autogenerated mock type for the Authz type
-type Authz struct {
-	mock.Mock
-}
-
-type Authz_Expecter struct {
-	mock *mock.Mock
-}
-
-func (_m *Authz) EXPECT() *Authz_Expecter {
-	return &Authz_Expecter{mock: &_m.Mock}
-}
-
-// Authorize provides a mock function for the type Authz
-func (_mock *Authz) Authorize(ctx context.Context, pr policies.Policy) error {
-	ret := _mock.Called(ctx, pr)
-
-	if len(ret) == 0 {
-		panic("no return value specified for Authorize")
-	}
-
-	var r0 error
-	if returnFunc, ok := ret.Get(0).(func(context.Context, policies.Policy) error); ok {
-		r0 = returnFunc(ctx, pr)
-	} else {
-		r0 = ret.Error(0)
-	}
-	return r0
-}
-
-// Authz_Authorize_Call is a *mock.Call that shadows Run/Return methods with type explicit version for method 'Authorize'
-type Authz_Authorize_Call struct {
-	*mock.Call
-}
-
-// Authorize is a helper method to define mock.On call
-//   - ctx context.Context
-//   - pr policies.Policy
-func (_e *Authz_Expecter) Authorize(ctx interface{}, pr interface{}) *Authz_Authorize_Call {
-	return &Authz_Authorize_Call{Call: _e.mock.On("Authorize", ctx, pr)}
-}
-
-func (_c *Authz_Authorize_Call) Run(run func(ctx context.Context, pr policies.Policy)) *Authz_Authorize_Call {
-	_c.Call.Run(func(args mock.Arguments) {
-		var arg0 context.Context
-		if args[0] != nil {
-			arg0 = args[0].(context.Context)
-		}
-		var arg1 policies.Policy
-		if args[1] != nil {
-			arg1 = args[1].(policies.Policy)
-		}
-		run(
-			arg0,
-			arg1,
-		)
-	})
-	return _c
-}
-
-func (_c *Authz_Authorize_Call) Return(err error) *Authz_Authorize_Call {
-	_c.Call.Return(err)
-	return _c
-}
-
-func (_c *Authz_Authorize_Call) RunAndReturn(run func(ctx context.Context, pr policies.Policy) error) *Authz_Authorize_Call {
-	_c.Call.Return(run)
-	return _c
-}