# -*- coding: utf-8 -*-
"""Auth strategy identifiers for accounts (v2 schema).

Imported by migration, repositories, and later CLI/service layers.
"""

AUTH_STRATEGY_PASSWORD_AUTO = "password_auto"
AUTH_STRATEGY_PASSWORD_WITH_CAPTCHA = "password_with_captcha"
AUTH_STRATEGY_PASSWORD_PLUS_2FA = "password_plus_2fa"
AUTH_STRATEGY_QR_CODE_MANUAL = "qr_code_manual"
AUTH_STRATEGY_PER_SESSION_MANUAL = "per_session_manual"
AUTH_STRATEGY_DEVICE_BOUND = "device_bound"
AUTH_STRATEGY_CLIENT_CERTIFICATE = "client_certificate"
AUTH_STRATEGY_API_TOKEN = "api_token"
AUTH_STRATEGY_SSO_REDIRECT = "sso_redirect"

ALL_AUTH_STRATEGIES = frozenset(
    {
        AUTH_STRATEGY_PASSWORD_AUTO,
        AUTH_STRATEGY_PASSWORD_WITH_CAPTCHA,
        AUTH_STRATEGY_PASSWORD_PLUS_2FA,
        AUTH_STRATEGY_QR_CODE_MANUAL,
        AUTH_STRATEGY_PER_SESSION_MANUAL,
        AUTH_STRATEGY_DEVICE_BOUND,
        AUTH_STRATEGY_CLIENT_CERTIFICATE,
        AUTH_STRATEGY_API_TOKEN,
        AUTH_STRATEGY_SSO_REDIRECT,
    }
)