auth

type BackupCodePair struct {
	PlainCode  string
	HashedCode string
}

type Claims struct {
	UserID uint   `json:"user_id"`
	Email  string `json:"email"`
	jwt.RegisteredClaims
}

type PasswordHistory struct {
	ID           uint   `gorm:"primarykey"`
	UserID       uint   `gorm:"not null"`
	PasswordHash string `gorm:"not null"`
	CreatedAt    time.Time
}

type PasswordPolicy struct {
	MinLength        int           // Minimum password length
	RequireUppercase bool          // Require at least one uppercase letter
	RequireLowercase bool          // Require at least one lowercase letter
	RequireNumbers   bool          // Require at least one number
	RequireSpecial   bool          // Require at least one special character
	ExpirationDays   int           // Number of days until password expires (0 = never)
	HistoryCount     int           // Number of previous passwords to remember (0 = disabled)
	DisallowCommon   bool          // Disallow common passwords
	MaxLoginAttempts int           // Maximum failed login attempts before lockout
	LockoutDuration  time.Duration // Duration of account lockout after max failed attempts
}