security

type AccountCredentialsProperties struct {
	Username      string `json:"username"`
	Password      string `json:"password"`
	SystemAccount bool   `json:"system-account"`
}

type AccountsProperties struct {
	Default    AccountCredentialsProperties   `json:"default"`
	Additional []AccountCredentialsProperties `json:"additional"`
}

type AuthEndpointsProperties struct {
	// BaseUrl is used to override service discovery and load-balancing
	// When set, ServiceName, Scheme and ContextPath are ignored
	BaseUrl string `json:"base-url"`
	// ServiceName The name of auth service, used by service discovery to authentication/authorization URL
	ServiceName string `json:"service-name"`
	// Scheme HTTP scheme ("http"/"https") of auth service, in case it's not resolvable from service registry
	Scheme string `json:"scheme"`
	// ContextPath The path prefix of all endpoints, in case it's not resolvable from service registry
	ContextPath string `json:"context-path"`
	// PasswordLogin Path of password login endpoint
	PasswordLogin string `json:"password-login"`
	// SwitchContext Path of switch tenant/user endpoint
	SwitchContext string `json:"switch-context"`
}

type ClientCredentialsProperties struct {
	ClientId     string `json:"client-id"`
	ClientSecret string `json:"secret"`
}

type SecurityIntegrationProperties struct {
	// How much time after a failed attempt, when re-try is allowed. Before this period pass,
	// integration framework will not re-attempt switching context to same combination of username and tenant name
	FailureBackOff utils.Duration `json:"failure-back-off"`

	// How much time that security context is guaranteed to be valid after requested.
	// when such validity cannot be guaranteed (e.g. this value is longer than token's validity),
	// we use FailureBackOff and re-request new token after `back-off` passes
	GuaranteedValidity utils.Duration `json:"guaranteed-validity"`

	Endpoints AuthEndpointsProperties     `json:"endpoints"`
	Client    ClientCredentialsProperties `json:"client"`
	Accounts  AccountsProperties          `json:"accounts"`
}