api

type AccessControlConfig struct {
	IPOracle IPOracleConfig `json:"ip_oracle"`
}

type AuthInfo struct {
	Environment string
	Role        string
	Username    string
	ValidFor    int
}

type Client struct {
	//    * Function name - my-function (name-only), my-function:v1 (with alias).
	//    * Function ARN - arn:aws:lambda:us-west-2:123456789012:function:my-function.
	//    * Partial ARN - 123456789012:function:my-function.
	FunctionName string

	Debug int
	// contains filtered or unexported fields
}

type Config struct {
	Name          string              `json:"name"`
	Version       string              `json:"version"`
	Idp           []IdpConfig         `json:"idp"`
	Roles         []RoleConfig        `json:"roles"`
	Workflow      WorkflowConfig      `json:"workflow"`
	Credentials   []CredentialsConfig `json:"credentials"`
	AccessControl AccessControlConfig `json:"access_control"`
}

type ConfigPublic struct {
	Name     string         `json:"name"`
	Idp      []IdpConfig    `json:"idp"`
	Roles    []RoleConfig   `json:"roles"`
	Workflow WorkflowConfig `json:"workflow"`
}

type ConfigRequest struct {
}

type ConfigResponse struct {
	Version string       `json:"version"`
	Config  ConfigPublic `json:"config"`
}

type Cred struct {
	Name   string      `json:"name"`
	Type   string      `json:"type"`
	Expiry int64       `json:"expiry"`
	Value  interface{} `json:"value"`
}

type CredentialsConfig struct {
	Name   string      `json:"name"`
	Type   string      `json:"type"`
	Config interface{} `json:"config"`
}

type CredentialsConfigIAMAssumeRole struct {
	TargetRole string `json:"target_role"`
}

type CredentialsConfigIAMUser struct {
}

type CredentialsConfigKube struct {
	CAKey string `json:"ca_key"`
}

type CredentialsConfigSSH struct {
	CAKey      string   `json:"ca_key"`
	Principals []string `json:"principals"`
}

type DirectAuthResponse struct {
	Credentials map[string][]byte `json:"result"`
}

type DirectOidcAuthRequest struct {
}

type DirectSamlAuthRequest struct {
	RequestedRole string  `json:"requested_role"`
	SAMLResponse  string  `json:"saml_response"`
	SigAlg        string  `json:"sig_alg"`
	Signature     string  `json:"signature"`
	RelayState    *string `json:"relay_state,omitempty"`
}

type DiscoveryRequest struct{}

type DiscoveryResponse struct{}

type IAMCred struct {
	ProfileName     string `json:"profile_name"`
	RoleArn         string `json:"role_arn"`
	RoleSessionName string `json:"role_session_name"`
	AccessKeyId     string `json:"access_key_id"`
	SecretAccessKey string `json:"secret_access_key"`
	SessionToken    string `json:"session_token"`
}

type IPOracleConfig struct {
	WhiteListCidrs []string `json:"whitelist_cidrs"`
}

type IdpConfig struct {
	Name   string      `json:"name"`
	Type   string      `json:"type"`
	Config interface{} `json:"config"`
}

type IdpConfigOidc struct {
}

type IdpConfigSaml struct {
	Certificate  string `json:"certificate"`
	Audience     string `json:"audience"`
	UsernameAttr string `json:"username_attr"`
	EmailAttr    string `json:"email_attr"`
	GroupsAttr   string `json:"groups_attr"`
	RedirectURI  string `json:"redirect_uri"`
}

type KubeCred struct {
	Username   string `json:"username"`
	PrivateKey string `json:"private_key"`
	PublicKey  string `json:"public_key"`
}

type Request struct {
	Type    string      `json:"type"`
	Payload interface{} `json:"payload"`
}

type RoleConfig struct {
	Name               string                       `json:"name"`
	Workflow           string                       `json:"workflow"`
	Credentials        []string                     `json:"credentials"`
	ValidForSeconds    int                          `json:"valid_for_seconds"`
	CredentialDelivery RoleCredentialDeliveryConfig `json:"credential_delivery"`
	ClientDefaults     string                       `json:"client_defaults"`
}

type RoleCredentialDeliveryConfig struct {
	KmsWrapWith string `json:"kms_wrap_with"`
}

type SSHCred struct {
	Username    string `json:"username"`
	Certificate []byte `json:"certficate"`
	PrivateKey  []byte `json:"private_key"`
}

type WorkflowAuthRequest struct {
	Username     string   `json:"username"`
	Role         string   `json:"role"`
	IssuingNonce string   `json:"issuing_nonce"`
	IdpNonce     string   `json:"idp_nonce"`
	Assertions   []string `json:"assertions"`
}

type WorkflowAuthResponse struct {
	Credentials []Cred `json:"credentials"`
}

type WorkflowConfig struct {
	BaseUrl  string                 `json:"base_url"`
	Policies []WorkflowPolicyConfig `json:"policies"`
}

type WorkflowPolicyConfig struct {
	Name                string         `json:"name"`
	IdpName             string         `json:"idp_name"`
	RequesterCanApprove bool           `json:"requester_can_approve"`
	IdentifyRoles       map[string]int `json:"identify_roles"`
	ApproverRoles       map[string]int `json:"approver_roles"`
}

type WorkflowStartRequest struct {
}

type WorkflowStartResponse struct {
	IssuingNonce string `json:"issuing_nonce"`
	IdpNonce     string `json:"idp_nonce"`
}