cli

type AuthorizerMissingPolicy int

type CertificatePolicy int

type Configuration struct {
	Realm             string   `config:"realm, required"`
	EnableAnonymous   bool     `config:"enable-anonymous"`
	AnonymousAuthRole string   `config:"anonymous-authrole"`
	EnableTicket      bool     `config:"enable-ticket"`
	TicketCheckFunc   string   `config:"ticket-check-func"`
	TicketGetRoleFunc string   `config:"ticket-get-role-func"`
	ExcludeAuthRole   []string `config:"exclude-auth-role"`
	EnableResumeToken bool     `config:"enable-resume-token"`

	EnableWs bool   `config:"enable-ws"`
	WsHost   string `config:"ws-host"`
	WsPort   uint16 `config:"ws-port"`

	EnableWss     bool     `config:"enable-wss"`
	WssHost       string   `config:"wss-host"`
	WssPort       uint16   `config:"wss-port"`
	WssCertFile   string   `config:"wss-cert-file"`
	WssKeyFile    string   `config:"wss-key-file"`
	WssClientAuth string   `config:"wss-client-auth"`
	WssClientCA   []string `config:"wss-client-ca"`

	EnableAuthorizer                bool     `config:"enable-authorization"`
	AuthorizerFunc                  string   `config:"authorizer-func"`
	EnableFeatureAuthorization      bool     `config:"enable-feature-authorization"`
	FeatureAuthorizationMatrixFunc  string   `config:"feature-authorizer-matrix-func"`
	FeatureAuthorizationMappingFunc string   `config:"feature-authorizer-mapping-func"`
	TrustedAuthRoles                []string `config:"trusted-authroles"`
	AuthorizerFallback              string   `config:"authorizer-fallback"`
	ConsentMode                     string   `config:"consent-mode"`
}

type InterconnectConfiguration struct {
	ListenTLS *TLSEndpoint
	ListenWS  *WSEndpoint
	Realm     string

	EnableTicketAuth         bool
	UpstreamAuthFunc         string
	UpstreamGetAuthRolesFunc string
	ReservedAuthRole         []string
	EnableResumeToken        bool

	EnableAnonymousAuth bool
	AnonymousAuthRole   string

	// Global Authorization Variables
	// Works in both authenticators
	TrustedAuthRoles []string
	AuthorizeFailed  AuthorizerMissingPolicy

	// Dynamic Authorizer
	// According to wamp-proto
	EnableAuthorizer   bool
	UpstreamAuthorizer string

	// Feature Authorizer
	// According to my brain and my whiteboard
	EnableFeatureAuthorizer          bool
	UpstreamFeatureAuthorizerMatrix  string
	UpstreamFeatureAuthorizerMapping string

	ConsentMode string
}

type TLSClientCAInfo struct {
	AuthRole string
	CACert   *x509.Certificate
}

type TLSEndpoint struct {
	WS               WSEndpoint
	Certificate      tls.Certificate
	ClientCertPolicy CertificatePolicy
	ValidClientCAs   []TLSClientCAInfo
}

type WSEndpoint struct {
	Port uint16
	Host string
}