route

type Backend struct {
	Service service.Service `config:"service"`
}

type CORS struct {
	Enable bool `config:"enable"`
	// AllowOrigins lists allowed Origin values; use * for any origin (incompatible with AllowCredentials).
	AllowOrigins []string `config:"allow_origins"`
	// AllowMethods lists allowed methods for preflight and Access-Control-Allow-Methods.
	AllowMethods []string `config:"allow_methods"`
	// AllowHeaders lists allowed request headers (Access-Control-Allow-Headers).
	AllowHeaders []string `config:"allow_headers"`
	// ExposeHeaders lists response headers the browser may read (Access-Control-Expose-Headers).
	ExposeHeaders    []string `config:"expose_headers"`
	AllowCredentials bool     `config:"allow_credentials"`
	// MaxAge is the preflight cache duration in seconds (Access-Control-Max-Age).
	MaxAge int64 `config:"max_age"`
}

type HTTPCache struct {
	Enable bool `config:"enable"`
	// TTL is entry time-to-live in seconds (default 60).
	TTL int64 `config:"ttl,default=60"`
	// KeyPrefix namespaces keys in Application.Cache() (default "httpcache").
	KeyPrefix string `config:"key_prefix"`
	// Methods lists HTTP methods to cache; empty means GET only.
	Methods []string `config:"methods"`
	// VaryHeaders lists request header names whose values are mixed into the cache key (RFC 7234 style).
	VaryHeaders []string `config:"vary_headers"`
	StatusMin   int      `config:"status_min,default=200"`
	StatusMax   int      `config:"status_max,default=299"`
	// MaxBodyBytes caps stored response bodies (default 2MiB).
	MaxBodyBytes int64 `config:"max_body_bytes,default=2097152"`
	// RespectUpstreamCacheControl skips storing when Cache-Control contains no-store or private.
	RespectUpstreamCacheControl bool `config:"respect_upstream_cache_control,default=true"`
	// CacheAuthorizedRequests allows caching when Authorization or Cookie is present (default false).
	CacheAuthorizedRequests bool `config:"cache_authorized_requests,default=false"`
	// SkipResponsesWithSetCookie avoids caching responses that set cookies (default true).
	SkipResponsesWithSetCookie bool `config:"skip_responses_with_set_cookie,default=true"`
	// OmitQueryFromKey excludes the raw query string from the cache key when true (default false).
	OmitQueryFromKey bool `config:"omit_query_from_key,default=false"`
}

type IPPolicy struct {
	Enable bool `config:"enable"`
	// Allow is a list of CIDRs. If non-empty, the client IP must match at least one entry.
	Allow []string `config:"allow"`
	// Deny is a list of CIDRs; matching clients receive HTTP 403.
	Deny []string `config:"deny"`
	// TrustedProxies lists CIDRs of reverse proxies. Only when the direct peer address is in this set
	// the gateway trusts X-Forwarded-For (first hop) to derive the client IP. Empty means the gateway
	// only uses the direct TCP remote address.
	TrustedProxies []string `config:"trusted_proxies"`
	// Message is the response body for denied requests.
	Message string `config:"message,default=Forbidden"`
}

type JSONAudit struct {
	Enable bool `config:"enable"`
	// Output configures where each audit line is written (see provider, file, http).
	Output JSONAuditOutput `config:"output"`
	// MaxBodyBytes caps captured request/response bodies (default 1MiB).
	MaxBodyBytes int64 `config:"max_body_bytes,default=1048576"`
	// SampleRate is the fraction of requests to audit (0.0–1.0]. Values <=0 are treated as 1.0.
	SampleRate float64 `config:"sample_rate,default=1"`
	// SniffJSON treats bodies as JSON when json.Valid succeeds if Content-Type is not JSON.
	SniffJSON bool `config:"sniff_json,default=true"`
	// DecompressGzip attempts gzip decompression for logging when Content-Encoding is gzip.
	DecompressGzip bool `config:"decompress_gzip,default=true"`
	// IncludePaths limits auditing to paths with these prefixes (empty = all, before excludes).
	IncludePaths []string `config:"include_paths"`
	// ExcludePaths skips paths with any of these prefixes.
	ExcludePaths []string `config:"exclude_paths"`
	// Redact controls masking of sensitive headers, query keys, and JSON object keys in audit logs.
	Redact JSONAuditRedact `config:"redact"`
}

type JSONAuditHTTPOutput struct {
	URL string `config:"url"`
	// Method defaults to POST if empty.
	Method string `config:"method,default=POST"`
	// Headers are optional extra request headers (e.g. Authorization).
	Headers map[string]string `config:"headers"`
	// TimeoutSeconds caps the outbound request (default 5; must be >0).
	TimeoutSeconds int64 `config:"timeout_seconds,default=5"`
}

type JSONAuditOutput struct {
	// Provider is console (default), file, http, or database.
	// Aliases: webhook/endpoint/api => http, db/sql => database.
	Provider string                  `config:"provider,default=console"`
	File     JSONAuditOutputFile     `config:"file"`
	HTTP     JSONAuditHTTPOutput     `config:"http"`
	Database JSONAuditOutputDatabase `config:"database"`
}

type JSONAuditOutputDatabase struct {
	// Engine must be one of postgres, mysql, or sqlite.
	Engine string `config:"engine"`
	// DSN is the database connection string.
	DSN string `config:"dsn"`
	// Host is used to build DSN when set (higher priority than DSN).
	Host string `config:"host"`
	// Port is used to build DSN when Host is set.
	Port int64 `config:"port"`
	// Username is used to build DSN when Host is set.
	Username string `config:"username"`
	// Password is used to build DSN when Host is set.
	Password string `config:"password"`
	// DB is database name (postgres/mysql) or file path (sqlite) when Host/DB mode is used.
	DB string `config:"db"`
}

type JSONAuditOutputFile struct {
	// Path is the filesystem path; each audit record is one appended line (NDJSON).
	Path string `config:"path"`
}

type JSONAuditRedact struct {
	// Enable turns redaction on or off. Omitted (nil) means on (default).
	Enable *bool `config:"enable"`
	// Keys lists JSON object keys and query parameter names to mask (case-insensitive).
	// Empty uses built-in defaults when redaction is enabled.
	Keys []string `config:"keys"`
}

type NormalizedBackend struct {
	Algorithm  string
	Servers    []*service.Server
	BaseConfig *service.Service
}

type RateLimit struct {
	Enable    bool              `config:"enable"`
	Algorithm string            `config:"algorithm,default=token-bucket"` // token-bucket, leaky-bucket, fixed-window
	KeyType   string            `config:"key_type,default=ip"`            // ip, user, apikey, clientid, header
	KeyHeader string            `config:"key_header"`                     // when key_type=header, specify header name
	Limit     int64             `config:"limit"`                          // limit count
	Window    int64             `config:"window"`                         // time window in seconds
	Burst     int64             `config:"burst"`                          // burst capacity (only for token-bucket)
	Message   string            `config:"message,default=Too Many Requests"`
	Headers   map[string]string `config:"headers"` // custom response headers
}

type Route struct {
	Name    string  `config:"name"`
	Path    string  `config:"path"`
	Backend Backend `config:"backend"`
	// PathType is the path type of route, options: prefix, regex
	PathType  string    `config:"path_type,default=prefix"`
	RateLimit RateLimit `config:"rate_limit"`
	JSONAudit JSONAudit `config:"json_audit"`
	HTTPCache HTTPCache `config:"http_cache"`
	IPPolicy  IPPolicy  `config:"ip_policy"`
	CORS      CORS      `config:"cors"`
}

type Service = service.Service