namespace ErsatzTV.Application.Auth;

/// <summary>
///     The identity of the single local administrator, as returned by a successful claim / login / password
///     change. The web host turns this into a cookie principal: <see cref="Username" /> becomes the name claim
///     and <see cref="SecurityStamp" /> is stamped as <see cref="AuthConstants.SecurityStampClaim" /> so a later
///     password change (which rotates the stamp) revokes the session.
/// </summary>
public record LocalAdminPrincipal(string Username, string SecurityStamp);