from libcpp cimport bool as c_bool
from libcpp.memory cimport shared_ptr
from libcpp.string cimport string
from ray.includes.optional cimport optional


cdef extern from "ray/rpc/authentication/authentication_mode.h" namespace "ray::rpc" nogil:
    cdef enum CAuthenticationMode "ray::rpc::AuthenticationMode":
        DISABLED "ray::rpc::AuthenticationMode::DISABLED"
        TOKEN "ray::rpc::AuthenticationMode::TOKEN"

    CAuthenticationMode GetAuthenticationMode()
    c_bool IsK8sTokenAuthEnabled()

cdef extern from "ray/rpc/authentication/authentication_token.h" namespace "ray::rpc" nogil:
    cdef cppclass CAuthenticationToken "ray::rpc::AuthenticationToken":
        CAuthenticationToken()
        CAuthenticationToken(string value)
        c_bool empty()
        c_bool Equals(const CAuthenticationToken& other)
        string ToAuthorizationHeaderValue()
        string GetRawValue()
        @staticmethod
        CAuthenticationToken FromMetadata(string metadata_value)

cdef extern from "ray/rpc/authentication/authentication_token_loader.h" namespace "ray::rpc" nogil:
    cdef cppclass CTokenLoadResult "ray::rpc::TokenLoadResult":
        optional[CAuthenticationToken] token
        string error_message
        c_bool hasError()

    cdef cppclass CAuthenticationTokenLoader "ray::rpc::AuthenticationTokenLoader":
        @staticmethod
        CAuthenticationTokenLoader& instance()
        void ResetCache()
        shared_ptr[const CAuthenticationToken] GetToken(c_bool ignore_auth_mode)
        CTokenLoadResult TryLoadToken(c_bool ignore_auth_mode)

cdef extern from "ray/rpc/authentication/authentication_token_validator.h" namespace "ray::rpc" nogil:
    cdef cppclass CAuthenticationTokenValidator "ray::rpc::AuthenticationTokenValidator":
        @staticmethod
        CAuthenticationTokenValidator& instance()
        c_bool ValidateToken(const shared_ptr[const CAuthenticationToken]& expected_token, const string& provided_metadata)