config

type AuthPlzConfig struct {
	Name               string   `yaml:"name"`
	Address            string   `yaml:"bind-address"`
	Port               string   `yaml:"bind-port"`
	ExternalAddress    string   `yaml:"external-address"`
	AllowedOrigins     []string `yaml:"allowed-origins"`
	DisableWebSecurity bool     `yaml:"disable-web-security"`

	Database     string `yaml:"database"`
	CookieSecret string `yaml:"cookie-secret"`
	TokenSecret  string `yaml:"token-secret"`

	StaticDir   string `yaml:"static-dir"`
	TemplateDir string `yaml:"template-dir"`

	TLS    TLSConfig    `yaml:"tls"`
	OAuth  OAuthConfig  `yaml:"oauth"`
	Mailer MailerConfig `yaml:"mailer"`

	MinimumPasswordLength int `yaml:"password-len"`
}

type CLIOptions struct {
	ConfigFile string `short:"c" long:"config" description:"AuthPlz configuration file" default:"./authplz.yml"`
	Prefix     string `short:"p" long:"prefix" description:"Prefix for environmental variable loading" default:"AUTHPLZ_"`
}

type MailerConfig struct {
	Driver  string            `yaml:"driver"`
	Options map[string]string `yaml:"options"`
}

type OAuthConfig struct {
	// Redirect to client app for oauth authorization
	AuthorizeRedirect string
	// Secret for OAuth token attestation
	TokenSecret string
	// AllowedScopes defines the scopes a client can grant for admins and users
	AllowedScopes configSplit
	// AllowedGrants defines the grant types a client can support for admins and users
	AllowedGrants configSplit
	// AllowedResponses defines response types a client can support
	AllowedResponses []string
	// AccessExpiry is Access Token expiry time
	AccessExpiry time.Duration
	// IDExpiry is ID Token expiry time
	IDExpiry time.Duration
	// AuthorizeExpiry is Authorization token expiry time
	AuthorizeExpiry time.Duration
	// RefreshExpiry is Refresh token expiry time
	RefreshExpiry time.Duration
}

type TLSConfig struct {
	Cert     string `yaml:"cert"`
	Key      string `yaml:"key"`
	Disabled bool   `yaml:"disabled"`
}