server

type OIDC struct {
	Issuer       string `yaml:"issuer" json:"issuer"`
	ClientID     string `yaml:"client_id" json:"client_id"`
	ClientSecret string `yaml:"client_secret" json:"client_secret"`
	// RedirectURL is this server's /v1/oidc/callback as the provider reaches it.
	RedirectURL string `yaml:"redirect_url" json:"redirect_url"`
	// UserClaim names the account (default preferred_username, then email).
	UserClaim   string   `yaml:"user_claim" json:"user_claim"`
	GroupsClaim string   `yaml:"groups_claim" json:"groups_claim"`
	Roles       []string `yaml:"roles" json:"roles"`
	// contains filtered or unexported fields
}

type Server struct {
	// File is the project's rig.yaml.
	File  string
	Store *Store
	OIDC  *OIDC
	// Open opens the project on an environment; engine.Open when nil.
	Open func(file, env string) (*engine.App, error)
	// ReauthWindow is how long a reauth lasts (default 5m).
	ReauthWindow time.Duration
	// RatePerSecond caps each caller's requests (default 50).
	RatePerSecond int
	// contains filtered or unexported fields
}

type Store struct {
	// contains filtered or unexported fields
}

type Token struct {
	ID      string    `json:"id"`
	User    string    `json:"user"`
	Name    string    `json:"name"`
	Expires time.Time `json:"expires"`
	// Session tokens come from a login and may reauth; API tokens never can.
	Session bool `json:"session,omitempty"`
}

type User struct {
	Hash   string   `json:"hash,omitempty"`
	TOTP   string   `json:"totp,omitempty"`
	Roles  []string `json:"roles,omitempty"`
	Groups []string `json:"groups,omitempty"`
	// OIDC users sign in through the identity provider only.
	OIDC bool `json:"oidc,omitempty"`
}