inventoryserver

type Admins struct {
	Users  []string
	Groups []string
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	CAPublicKey sshcert.RawPublicKey
	Resolver    *Resolver
	Validator   *oidc.Validator
	Discovery   *wire.Discovery
}

type Control struct {
	Store     *inventory.Managed
	Directory directory.Directory
	Validator TokenValidator
	Admins    Admins
	// contains filtered or unexported fields
}

type OIDCConfig struct {
	IdentityMode oidc.IdentityMode `yaml:"identity_mode,omitempty" json:"identity_mode,omitempty"`
	UserIDClaim  string            `yaml:"user_id_claim,omitempty" json:"user_id_claim,omitempty"`
	Issuer       string            `yaml:"issuer" json:"issuer"`
	ClientID     string            `yaml:"client_id" json:"client_id"`
	ClientSecret string            `yaml:"client_secret,omitempty" json:"client_secret,omitempty"` // Optional, for confidential clients
}

type Resolver struct {
	Directory         directory.Directory
	Hosts             inventory.Hosts
	DirectoryRevision string
}

type ServerConfig struct {
	CAPublicKey string     `yaml:"ca_pubkey" json:"ca_pubkey"`
	OIDC        OIDCConfig `yaml:"oidc" json:"oidc"`
}

type TokenValidator interface {
	Validate(context.Context, string) (*oidc.Claims, error)
}