auth

type Cfg struct {
	Key             []byte     `json:"key,omitempty"`
	AccessTokenTTL  float64    `json:"access_token_ttl"`
	RefreshTokenTTL float64    `json:"refresh_token_ttl"`
	LDAP            []CfgLDAP  `json:"ldap"`
	SSO             CfgSSO     `json:"sso"`
	Limiter         CfgLimiter `json:"limiter"`
}

type CfgLDAP struct {
	Domain string        `json:"key"`
	Addrs  []CfgLDAPAddr `json:"addrs"`
}

type CfgLDAPAddr struct {
	Addr    string `json:"addr"`
	Secured bool   `json:"secured"`
}

type CfgLimiter struct {
	MaxAttempts int     `json:"max_attempts"`
	TTL         float64 `json:"ttl"`
}

type CfgOIDC struct {
	ConfigURL         string   `json:"config_url"`
	ClientID          string   `json:"client_id"`
	ClientSecret      []byte   `json:"client_secret,omitempty"`
	RootURL           string   `json:"root_url"`
	LoginAttr         string   `json:"login_attr"`
	ValidRedirectURLs []string `json:"valid_redirect_urls"`
}

type CfgSAML struct {
	MetaDataFile      string   `json:"meta_data_file"`
	CertFile          string   `json:"cert_file"`
	KeyFile           string   `json:"key_file"`
	RootURL           string   `json:"root_url"`
	LoginAttr         string   `json:"login_attr"`
	ValidRedirectURLs []string `json:"valid_redirect_urls"`
}

type CfgSSO struct {
	Enabled string   `json:"enabled"`
	OIDC    *CfgOIDC `json:"oidc,omitempty"`
	SAML    *CfgSAML `json:"saml,omitempty"`
}

type Configurator struct {
	// contains filtered or unexported fields
}

type Request struct {
	Key             *string  `json:"key" binding:"omitempty,min=8,max=256"`
	AccessTokenTTL  *float64 `json:"access_token_ttl" binding:"omitempty,min=1"`
	RefreshTokenTTL *float64 `json:"refresh_token_ttl" binding:"omitempty,min=1"`
	LDAP            []struct {
		Domain string `json:"domain" binding:"required,min=1,max=256"`
		Addrs  []struct {
			Addr    string `json:"addr" binding:"required,min=1,max=256"`
			Secured bool   `json:"secured"`
		} `json:"addrs" binding:"required,min=1,max=10,dive"`
	} `json:"ldap" binding:"omitempty,unique=Domain,dive"`
	SSO *struct {
		Enabled string `json:"enabled" binding:"required,oneof=oidc saml none"`
		OIDC    *struct {
			ConfigURL         string   `json:"config_url" binding:"required"`
			ClientID          string   `json:"client_id" binding:"required"`
			ClientSecret      *string  `json:"client_secret" binding:"omitempty,min=1"`
			RootURL           string   `json:"root_url" binding:"required,min=1,max=1024"`
			LoginAttr         string   `json:"login_attr" binding:"required"`
			ValidRedirectURLs []string `json:"valid_redirect_urls" binding:"required,max=10,dive,min=1,max=256"`
		} `json:"oidc,omitempty" binding:"required_if=Enabled oidc"`
		SAML *struct {
			RootURL           string   `json:"root_url" binding:"required,min=1,max=1024"`
			LoginAttr         string   `json:"login_attr" binding:"required"`
			ValidRedirectURLs []string `json:"valid_redirect_urls" binding:"required,max=10,dive,min=1,max=256"`
		} `json:"saml,omitempty" binding:"required_if=Enabled saml"`
	} `json:"sso" binding:"omitempty"`
	Limiter *struct {
		MaxAttempts int     `json:"max_attempts" binding:"required,min=1"`
		TTL         float64 `json:"ttl" binding:"required,min=1"`
	} `json:"limiter" binding:"omitempty"`
}

type Transformer struct {
	AccessTokenTTL  float64 `json:"access_token_ttl"`
	RefreshTokenTTL float64 `json:"refresh_token_ttl"`
	LDAP            []struct {
		Domain string `json:"key"`
		Addrs  []struct {
			Addr    string `json:"addr"`
			Secured bool   `json:"secured"`
		} `json:"addrs"`
	} `json:"ldap"`
	SSO *struct {
		Enabled string `json:"enabled"`
		OIDC    *struct {
			ConfigURL         string   `json:"config_url"`
			ClientID          string   `json:"client_id"`
			RootURL           string   `json:"root_url"`
			LoginAttr         string   `json:"login_attr"`
			ValidRedirectURLs []string `json:"valid_redirect_urls"`
		} `json:"oidc,omitempty"`
		SAML *struct {
			MetadataUploaded  bool     `json:"metadata_uploaded"`
			CertUploaded      bool     `json:"cert_uploaded"`
			KeyUploaded       bool     `json:"key_uploaded"`
			RootURL           string   `json:"root_url"`
			LoginAttr         string   `json:"login_attr"`
			ValidRedirectURLs []string `json:"valid_redirect_urls"`
		} `json:"saml,omitempty"`
	} `json:"sso"`
	Limiter *struct {
		MaxAttempts int     `json:"max_attempts"`
		TTL         float64 `json:"ttl"`
	} `json:"limiter"`
}