feat (Session): add session management APIs

core/authenticate/config.go

@@ -54,6 +54,14 @@ type SessionConfig struct {
 	// Validity is the duration for which the session is valid
 	Validity time.Duration `mapstructure:"validity" yaml:"validity" default:"720h"`
 	Secure   bool          `mapstructure:"secure" yaml:"secure" default:"false"`
+	// Headers configuration for session metadata collection
+	Headers SessionMetadataHeaders `yaml:"headers" mapstructure:"headers"`
+}
+
+type SessionMetadataHeaders struct {
+	ClientIP      string `yaml:"client_ip" mapstructure:"client_ip" default:"x-frontier-ip"`
+	ClientCountry string `yaml:"client_country" mapstructure:"client_country" default:"x-frontier-country"`
+	ClientCity    string `yaml:"client_city" mapstructure:"client_city" default:"x-frontier-city"`
 }
 
 type OIDCConfig struct {

core/authenticate/service.go

@@ -80,6 +80,7 @@ type FlowRepository interface {
 
 type SessionService interface {
 	ExtractFromContext(ctx context.Context) (*frontiersession.Session, error)
+	ListSessions(ctx context.Context, userID string) ([]*frontiersession.Session, error)
 }
 
 type TokenService interface {

core/authenticate/service_test.go

@@ -102,7 +102,7 @@ func TestService_GetPrincipal(t *testing.T) {
 					AuthenticatedAt: time.Now().Add(-time.Hour),
 					ExpiresAt:       time.Now().Add(time.Hour),
 					CreatedAt:       time.Time{},
-					Metadata:        nil,
+					Metadata:        frontiersession.SessionMetadata{},
 				}
 				mockSessionService.EXPECT().ExtractFromContext(mock.Anything).Return(mockSess, nil)
 
@@ -130,7 +130,7 @@ func TestService_GetPrincipal(t *testing.T) {
 					AuthenticatedAt: time.Now().Add(-time.Hour),
 					ExpiresAt:       time.Now().Add(-time.Hour),
 					CreatedAt:       time.Time{},
-					Metadata:        nil,
+					Metadata:        frontiersession.SessionMetadata{},
 				}
 				mockSessionService.EXPECT().ExtractFromContext(mock.Anything).Return(mockSess, nil)