config

type DaemonConfig struct {
	Group string `yaml:"-"` // Group name the local unix socket should be chown'ed to

	RestServerIPAddr   string `yaml:"-"`
	RestServerPort     int    `yaml:"-"`
	RestWorkerEndpoint string `yaml:"-"`

	// An array of SHA256 certificate fingerprints that belong to trusted TLS clients.
	TrustedTLSClientCertFingerprints []string `yaml:"trusted_tls_client_cert_fingerprints"`

	// OIDC-specific configuration.
	OidcIssuer   string `yaml:"oidc.issuer"`
	OidcClientID string `yaml:"oidc.client.id"`
	OidcScope    string `yaml:"oidc.scopes"`
	OidcAudience string `yaml:"oidc.audience"`
	OidcClaim    string `yaml:"oidc.claim"`

	// OpenFGA-specific configuration.
	OpenfgaAPIToken string `yaml:"openfga.api.token"`
	OpenfgaAPIURL   string `yaml:"openfga.api.url"`
	OpenfgaStoreID  string `yaml:"openfga.store.id"`
}