config

type BufferLimit struct {
	Read  bytesize.ByteSize `koanf:"read"  mapstructure:"read"`
	Write bytesize.ByteSize `koanf:"write" mapstructure:"write"`
}

type CORS struct {
	AllowedOrigins   []string      `koanf:"allowed_origins"`
	AllowedMethods   []string      `koanf:"allowed_methods"`
	AllowedHeaders   []string      `koanf:"allowed_headers"`
	ExposedHeaders   []string      `koanf:"exposed_headers"`
	AllowCredentials bool          `koanf:"allow_credentials"`
	MaxAge           time.Duration `koanf:"max_age,string"`
}

type CacheConfig struct {
	Type   string         `koanf:"type"`
	Config map[string]any `koanf:"config"`
}

type Configuration struct {
	Serve                ServeConfig          `koanf:"serve"`
	Management           ManagementConfig     `koanf:"management"`
	Log                  LoggingConfig        `koanf:"log"`
	Tracing              TracingConfig        `koanf:"tracing"`
	Metrics              MetricsConfig        `koanf:"metrics"`
	Profiling            ProfilingConfig      `koanf:"profiling"`
	Cache                CacheConfig          `koanf:"cache"`
	Prototypes           *MechanismPrototypes `koanf:"mechanisms,omitempty"`
	Default              *DefaultRule         `koanf:"default_rule,omitempty"`
	Providers            RuleProviders        `koanf:"providers,omitempty"`
	SecretsReloadEnabled bool                 `koanf:"secrets_reload_enabled"`
}

type ConfigurationPath string

type ConnectionsLimit struct {
	MaxPerHost     int `koanf:"max_per_host"`
	MaxIdle        int `koanf:"max_idle"`
	MaxIdlePerHost int `koanf:"max_idle_per_host"`
}

type DefaultRule struct {
	BacktrackingEnabled bool              `koanf:"backtracking_enabled"`
	Execute             []MechanismConfig `koanf:"execute"`
	ErrorHandler        []MechanismConfig `koanf:"on_error"`
}

type EnforcementSettings struct {
	EnforceSecureDefaultRule    bool
	EnforceSecureTrustedProxies bool
	EnforceIngressTLS           bool
	EnforceEgressTLS            bool
	EnforceUpstreamTLS          bool
}

type EnvVarPrefix string

type KeyStore struct {
	Path     string `koanf:"path"     mapstructure:"path"`
	Password string `koanf:"password" mapstructure:"password"`
}

type LogFormat int

type LoggingConfig struct {
	Format LogFormat     `koanf:"format,string"`
	Level  zerolog.Level `koanf:"level,string"`
}

type ManagementConfig struct {
	Host        string      `koanf:"host"`
	Port        int         `koanf:"port"`
	Timeout     Timeout     `koanf:"timeout"`
	BufferLimit BufferLimit `koanf:"buffer_limit"`
	CORS        *CORS       `koanf:"cors,omitempty"`
	TLS         *TLS        `koanf:"tls,omitempty"  validate:"enforced=notnil"`
}

type Mechanism struct {
	ID        string          `koanf:"id"`
	Type      string          `koanf:"type"`
	Config    MechanismConfig `koanf:"config"`
	Condition string          `koanf:"if"`
}

type MechanismConfig map[string]any

type MechanismPrototypes struct {
	Authenticators  []Mechanism `koanf:"authenticators"`
	Authorizers     []Mechanism `koanf:"authorizers"`
	Contextualizers []Mechanism `koanf:"contextualizers"`
	Finalizers      []Mechanism `koanf:"finalizers"`
	ErrorHandlers   []Mechanism `koanf:"error_handlers"`
}

type MetricsConfig struct {
	Enabled bool `koanf:"enabled"`
}

type OperationMode int

type ProfilingConfig struct {
	Enabled bool   `koanf:"enabled"`
	Host    string `koanf:"host"`
	Port    int    `koanf:"port"`
}

type RespondConfig struct {
	Verbose bool `koanf:"verbose"`
	With    struct {
		Accepted            ResponseOverride `koanf:"accepted"`
		ArgumentError       ResponseOverride `koanf:"argument_error"`
		AuthenticationError ResponseOverride `koanf:"authentication_error"`
		AuthorizationError  ResponseOverride `koanf:"authorization_error"`
		CommunicationError  ResponseOverride `koanf:"communication_error"`
		InternalError       ResponseOverride `koanf:"internal_error"`
		NoRuleError         ResponseOverride `koanf:"no_rule_error"`
	} `koanf:"with"`
}

type ResponseOverride struct {
	Code int `koanf:"code"`
}

type RuleProviders struct {
	FileSystem   map[string]any `koanf:"file_system,omitempty"`
	HTTPEndpoint map[string]any `koanf:"http_endpoint,omitempty"`
	CloudBlob    map[string]any `koanf:"cloud_blob,omitempty"`
	Kubernetes   map[string]any `koanf:"kubernetes,omitempty"`
}

type SecureDefaultRule bool

type ServeConfig struct {
	Host             string           `koanf:"host"`
	Port             int              `koanf:"port"`
	Timeout          Timeout          `koanf:"timeout"`
	BufferLimit      BufferLimit      `koanf:"buffer_limit"`
	ConnectionsLimit ConnectionsLimit `koanf:"connections_limit"`
	CORS             *CORS            `koanf:"cors,omitempty"`
	TLS              *TLS             `koanf:"tls,omitempty"             validate:"enforced=notnil"`
	TrustedProxies   []string         `koanf:"trusted_proxies,omitempty" validate:"enforced=secure_networks"`
	Respond          RespondConfig    `koanf:"respond"`
}

type TLS struct {
	KeyStore     KeyStore        `koanf:"key_store"     mapstructure:"key_store"`
	KeyID        string          `koanf:"key_id"        mapstructure:"key_id"`
	CipherSuites TLSCipherSuites `koanf:"cipher_suites" mapstructure:"cipher_suites"`
	MinVersion   TLSMinVersion   `koanf:"min_version"   mapstructure:"min_version"`
}

type TLSCipherSuites []uint16

type TLSMinVersion uint16

type Timeout struct {
	Read  time.Duration `koanf:"read,string"  mapstructure:"read"`
	Write time.Duration `koanf:"write,string" mapstructure:"write"`
	Idle  time.Duration `koanf:"idle,string"  mapstructure:"idle"`
}

type TracingConfig struct {
	Enabled           bool   `koanf:"enabled"`
	SpanProcessorType string `koanf:"span_processor"`
}

type TrustStore struct {
	Path string `koanf:"path" mapstructure:"path"`
}