/*****
License
--------------
Copyright © 2020-2025 Mojaloop Foundation
The Mojaloop files are made available by the Mojaloop Foundation under the Apache License, Version 2.0 (the "License") and you may not use these files except in compliance with the License. You may obtain a copy of the License at

 http://www.apache.org/licenses/LICENSE-2.0

 Unless required by applicable law or agreed to in writing, the Mojaloop files are distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Contributors
--------------
This is the official list of the Mojaloop project contributors for this file.
Names of the original copyright holders (individuals or organizations)
should be listed with a '*' in the first column. People who have
contributed from an organization can be listed under the organization
that actually holds the copyright for their contributions (see the
Mojaloop Foundation for an example). Those individuals should have
their names indented and be marked with a '-'. Email address can be added
optionally within square brackets <email>.

* Mojaloop Foundation
- Name Surname <name.surname@mojaloop.io>

* Crosslake
- Pedro Sousa Barreto <pedrob@crosslaketech.com>
*****/
export type CallSecurityContext = {
    /**
     * This holds the username in case of a user made call, i.e.,  password grant,
     * will be null for app to app calls, i.e., client_credentials grant
     */
    username: string | null;
    /**
     * This holds the client_id of the caller app, regardless of grant type
     */
    clientId: string;
    /**
     * Array of role identifiers for platform wide access this security principal has associated to itself
     */
    platformRoleIds: string[];
    /**
     * Original bearer token passed by the caller
     */
    accessToken: string;
    /**
     * Array of per participants roles identifiers this this security principal has associated to itself
     */
    participantRoleIds?: {
        participantId: string;
        roleId: string;
    }[];
};