ca

type AuthToken struct {
	Provider string
	Token    string
}

type BootstrapAuth struct {
	Type         string   `json:"type"`
	Issuer       string   `json:"issuer,omitempty"`
	ClientID     string   `json:"client_id,omitempty"`
	ClientSecret string   `json:"client_secret,omitempty"`
	Scopes       []string `json:"scopes,omitempty"`
	Command      string   `json:"command,omitempty"`
}

type CA struct {
	// contains filtered or unexported fields
}

type CertParams struct {
	Identity   string            `json:"identity"`
	Names      []string          `json:"principals"`
	Expiration time.Duration     `json:"expiration"`
	Extensions map[string]string `json:"extensions"`
}

type DiscoveryResponse struct {
	Auth          *BootstrapAuth `json:"auth"`
	MatchPatterns []string       `json:"matchPatterns,omitempty"`

	// CacheControl is the Cache-Control header from the policy server response.
	// Not serialized to JSON — used by the CA server to pass through to clients.
	CacheControl string `json:"-"`
}

type Option interface {
	// contains filtered or unexported methods
}

type PolicyError struct {
	StatusCode int
	Message    string
}

type PolicyResponse struct {
	CertParams CertParams    `json:"certParams"`
	Policy     policy.Policy `json:"policy"`
}