package auth

import (
	"github.com/go-gost/core/auth"
)

// authenticator is an Authenticator that authenticates client by key-value pairs.
type authenticator struct {
	kvs map[string]string
}

// NewAuthenticator creates an Authenticator that authenticates client by pre-defined user mapping.
func NewAuthenticator(kvs map[string]string) auth.Authenticator {
	return &authenticator{
		kvs: kvs,
	}
}

// Authenticate checks the validity of the provided user-password pair.
func (au *authenticator) Authenticate(user, password string) bool {
	if au == nil || len(au.kvs) == 0 {
		return true
	}

	v, ok := au.kvs[user]
	return ok && (v == "" || password == v)
}