control

type Admins struct{ Users, Groups []string }

type Config struct {
	Key                                                    sshcert.RawPrivateKey
	DirectoryURL, DirectoryBackendURL, InventoryBackendURL string
	Validator                                              TokenValidator
	DirectoryAdmins, InventoryAdmins                       Admins
	SCIMToken                                              string
	InventoryToken                                         string
	// EnrollmentToken authorizes pending submissions only. Empty disables that
	// path; single-use preapproval credentials are validated by inventory.
	EnrollmentToken string
	TLS             tlsconfig.Config
}

type Server struct {
	// contains filtered or unexported fields
}

type TokenValidator interface {
	Validate(context.Context, string) (*oidc.Claims, error)
}