Cleanuparr/code/backend/Cleanuparr.Infrastructure/Features/Auth/IPlexAuthService.cs

namespace Cleanuparr.Infrastructure.Features.Auth;

public sealed record PlexPinResult
{
    public required int PinId { get; init; }
    public required string PinCode { get; init; }
    public required string AuthUrl { get; init; }
}

public sealed record PlexPinCheckResult
{
    public required bool Completed { get; init; }
    public string? AuthToken { get; init; }
}

public sealed record PlexAccountInfo
{
    public required string AccountId { get; init; }
    public required string Username { get; init; }
    public string? Email { get; init; }
}

public interface IPlexAuthService
{
    /// <summary>
    /// Creates a Plex authentication PIN and builds the URL the user is sent to in order to authorize.
    /// </summary>
    /// <param name="forwardUrl">
    /// Optional URL Plex redirects the browser back to after authorization. When omitted, no redirect
    /// is added and the caller is expected to poll <see cref="CheckPin"/> instead.
    /// </param>
    Task<PlexPinResult> RequestPin(string? forwardUrl = null);

    /// <summary>
    /// Checks whether a PIN has been authorized, returning the Plex auth token once it has.
    /// </summary>
    Task<PlexPinCheckResult> CheckPin(int pinId);

    /// <summary>
    /// Retrieves the Plex account associated with the given auth token.
    /// </summary>
    Task<PlexAccountInfo> GetAccount(string authToken);
}