bootnode

type Config struct {
	// Enabled gates the whole plugin. A zero-value Config is disabled; callers
	// opt in explicitly. Mirrors the waitlist plugin convention.
	Enabled bool

	// IAMEndpoint is the Hanzo IAM base URL (default https://hanzo.id).
	IAMEndpoint string

	// IAMClientID / IAMClientSecret are the bootnode service's IAM application
	// credentials, used for the OAuth2 authorization-code exchange.
	IAMClientID     string
	IAMClientSecret string

	// AllowedOrgs restricts which IAM orgs may authenticate. Empty means the
	// canonical four (hanzo, zoo, lux, pars).
	AllowedOrgs []string

	// FrontendURL is the default OAuth redirect base when a request omits an
	// explicit redirect_uri (default http://localhost:3001).
	FrontendURL string

	// APIKeySalt is mixed into the SHA-256 of bootnode-issued API keys (bn_…)
	// before storage. Required in production; the plugin refuses to start with
	// the insecure default when IAMEndpoint points at a non-local host.
	APIKeySalt string

	// KubeNamespace is the namespace bootno.de CRs are applied into
	// (default "bootnode").
	KubeNamespace string

	// CommerceURL / CommerceAPIKey configure the Hanzo Commerce billing client.
	// An empty API key disables billing (no-op).
	CommerceURL    string
	CommerceAPIKey string
}

type Identity struct {
	UserID string
	Email  string
	Org    string
	// ReadOnly is true for publishable (pk-) keys.
	ReadOnly bool
}