add a bunch of authentication stuff

Foxchat.Identity/Database/Models/Account.cs

@@ -1,8 +1,7 @@
 namespace Foxchat.Identity.Database.Models;
 
-public class Account
+public class Account : BaseModel
 {
-    public Ulid Id { get; init; } = Ulid.NewUlid();
     public string Username { get; set; } = null!;
     public string Email { get; set; } = null!;
     public string Password { get; set; } = null!;

Foxchat.Identity/Database/Models/Application.cs

@@ -0,0 +1,46 @@
+using System.Security.Cryptography;
+using Microsoft.AspNetCore.WebUtilities;
+
+namespace Foxchat.Identity.Database.Models;
+
+public class Application : BaseModel
+{
+    public required string ClientId { get; init; }
+    public required string ClientSecret { get; init; }
+    public required string Name { get; init; }
+    public required string[] Scopes { get; init; }
+
+    public static Application Create(string name, string[] scopes)
+    {
+        var clientId = RandomNumberGenerator.GetHexString(16, true);
+        var clientSecretBytes = RandomNumberGenerator.GetBytes(48);
+        var clientSecret = WebEncoders.Base64UrlEncode(clientSecretBytes);
+
+        if (!scopes.All(s => Scope.ValidScopes.Contains(s)))
+        {
+            throw new ArgumentException("Invalid scopes passed to Application.Create", nameof(scopes));
+        }
+
+        return new Application
+        {
+            ClientId = clientId,
+            ClientSecret = clientSecret,
+            Name = name,
+            Scopes = scopes,
+        };
+    }
+}
+
+public static class Scope
+{
+    /// <summary>
+    /// OAuth scope for identifying a user and nothing else.
+    /// </summary>
+    public const string Identity = "identity";
+    /// <summary>
+    /// OAuth scope for a full chat client. This grants *full access* to an account.
+    /// </summary>
+    public const string ChatClient = "chat_client";
+
+    public static readonly string[] ValidScopes = [Identity, ChatClient];
+}

Foxchat.Identity/Database/Models/ChatInstance.cs

@@ -1,8 +1,7 @@
 namespace Foxchat.Identity.Database.Models;
 
-public class ChatInstance
+public class ChatInstance : BaseModel
 {
-    public Ulid Id { get; init; } = Ulid.NewUlid();
     public string Domain { get; init; } = null!;
     public string BaseUrl { get; set; } = null!;
     public string PublicKey { get; set; } = null!;

Foxchat.Identity/Database/Models/Token.cs

@@ -1,8 +1,26 @@
+using System.Security.Cryptography;
+using Foxchat.Core.Utils;
+using NodaTime;
+
 namespace Foxchat.Identity.Database.Models;
 
-public class Token
+public class Token : BaseModel
 {
-    public Ulid Id { get; init; } = Ulid.NewUlid();
+    public byte[] Hash { get; set; } = null!;
+    public string[] Scopes { get; set; } = [];
+    public Instant Expires { get; set; }
+
     public Ulid AccountId { get; set; }
     public Account Account { get; set; } = null!;
-}
+
+    public Ulid ApplicationId { get; set; }
+    public Application Application { get; set; } = null!;
+
+    public static (string, byte[]) Generate()
+    {
+        var token = CryptoUtils.RandomToken(48);
+        var hash = SHA512.HashData(Convert.FromBase64String(token));
+
+        return (token, hash);
+    }
+}