use auth::{JwksProvider, ProviderConfig};

let providers = vec![
    ProviderConfig::google(),
    ProviderConfig::microsoft(Some("tenant-id")),
    ProviderConfig::auth0("your-domain.auth0.com"),
];

let jwks_provider = Arc::new(JwksProvider::new(providers));

use auth::{JwtValidator, ValidationConfig};

let config = ValidationConfig {
    allowed_issuers: vec!["https://accounts.google.com".to_string()],
    allowed_audiences: vec!["your-client-id".to_string()],
    clock_skew: Duration::from_secs(300),
    require_exp: true,
    require_nbf: false,
};

let validator = Arc::new(JwtValidator::new(jwks_provider, config));

use auth::session::{SessionConfig, SessionManager};

let (encrypt_key, sign_key) = SessionCrypto::generate_keys()?;

let session_config = SessionConfig {
    encrypt_key,
    sign_key,
    domain: Some("example.com".to_string()),
    secure: true,
    duration: Duration::from_secs(86400), // 24 hours
};

let session_manager = Arc::new(SessionManager::new(session_config)?);

use auth::{OAuthConfig, OAuthManager, OAuthProvider};

let oauth_config = OAuthConfig {
    provider: OAuthProvider::Google,
    client_id: "your-client-id".to_string(),
    client_secret: "your-client-secret".to_string(),
    redirect_url: "https://example.com/auth/callback".to_string(),
    scopes: vec!["openid".to_string(), "email".to_string(), "profile".to_string()],
};

let oauth_manager = Arc::new(OAuthManager::new(
    oauth_config,
    session_manager.clone(),
    Some(validator),
));

use auth::{AuthMiddleware, AuthMiddlewareConfig};

let auth_config = AuthMiddlewareConfig {
    required: true,
    public_paths: vec![
        "/health".to_string(),
        "/auth/login".to_string(),
        "/auth/callback".to_string(),
        "/auth/logout".to_string(),
    ],
};

let auth_middleware = Arc::new(AuthMiddleware::new(
    session_manager,
    Some(oauth_manager.clone()),
    auth_config,
));