authn

type BckACL struct {
	Bck    cmn.Bck         `json:"bck"`
	Access apc.AccessAttrs `json:"perm,string"`
}

type CluACL struct {
	ID     string          `json:"id"`
	Alias  string          `json:"alias,omitempty"`
	URLs   []string        `json:"urls,omitempty"`
	Access apc.AccessAttrs `json:"perm,string,omitempty"`
}

type Config struct {
	Server  ServerConf  `json:"auth"`
	Log     LogConf     `json:"log"`
	Net     NetConf     `json:"net"`
	Timeout TimeoutConf `json:"timeout"`
}

type ConfigToUpdate struct {
	Server *ServerConfToSet `json:"auth"`
}

type DatabaseConf struct {
	DBType   string `json:"type"`
	Filepath string `json:"filepath"`
}

type HTTPConf struct {
	Certificate string `json:"server_crt"`
	Key         string `json:"server_key"`
	Port        int    `json:"port"`
	UseHTTPS    bool   `json:"use_https"`
}

type LogConf struct {
	Dir           string       `json:"dir"`
	Level         string       `json:"level"`
	FlushInterval cos.Duration `json:"flush_interval"`
}

type LoginMsg struct {
	ExpiresIn *time.Duration `json:"expires_in"`
	Password  string         `json:"password"`
}

type NetConf struct {
	ExternalURL string   `json:"external_url"`
	HTTP        HTTPConf `json:"http"`
}

type OIDCConfiguration struct {
	Issuer                           string   `json:"issuer"`
	TokenEndpoint                    string   `json:"token_endpoint"`
	UserinfoEndpoint                 string   `json:"userinfo_endpoint,omitempty"`
	JWKSURI                          string   `json:"jwks_uri"`
	IDTokenSigningAlgValuesSupported []string `json:"id_token_signing_alg_values_supported"`
}

type PubKeyMsg struct {
	PublicKey string `json:"public_key"`
}

type RegisteredClusters struct {
	Clusters map[string]*CluACL `json:"clusters,omitempty"`
}

type Role struct {
	Name        string    `json:"name"`
	Description string    `json:"desc"`
	ClusterACLs []*CluACL `json:"clusters"`
	BucketACLs  []*BckACL `json:"buckets"`
	IsAdmin     bool      `json:"admin"`
}

type ServerConf struct {
	Secret string `json:"secret"`
	// Default lifetime for issued JWT
	Expire cos.Duration `json:"expiration_time"`
	// Max JWT lifetime
	MaxTokenAge cos.Duration `json:"max_token_age"`
	// Only used for validating signing key public key against AIS clusters
	PubKey *string `json:"public_key"`
	// Deprecated: use signing_key.bits instead.
	RSAKeyBits int `json:"rsa_key_bits,omitempty"`
	// Config for key signing -- currently only RSA is supported
	SigningKey SigningKeyConf `json:"signing_key"`
	// Config for authN database
	DBConf DatabaseConf `json:"db"`
	// contains filtered or unexported fields
}

type ServerConfToSet struct {
	Secret *string       `json:"secret,omitempty"`
	Expire *cos.Duration `json:"expiration_time,omitempty"`
}

type SigningKeyConf struct {
	Bits int `json:"bits,omitempty"`
	// "external": key is managed outside this process; auto-generation and API rotation are disabled
	Mode string `json:"mode,omitempty"`
}

type TimeoutConf struct {
	Default cos.Duration `json:"default_timeout"`
}

type TokenList struct {
	Tokens  []string `json:"tokens"`
	Version int64    `json:"version,string"`
}

type TokenMsg struct {
	Token string `json:"token"`
}

type User struct {
	ID       string  `json:"id"`
	Password string  `json:"pass,omitempty"`
	Roles    []*Role `json:"roles"`
}