server

type AuthRequest struct {
	Service  string
	Username string
	Password string
	Access   []auth.Access
}

type AuthenticationConfig struct {
	Condition string
}

type AuthorizationConfig struct {
	Condition string
}

type Config struct {
	Server    ServerConfig     `yaml:"server"`
	Token     TokenConfig      `yaml:"token"`
	Providers []ProviderConfig `yaml:"providers"`
}

type Provider interface {
	// Authorize a request and return the subset of requested actions it is permitted to
	// perform
	Authorize(ctx context.Context, req AuthRequest) ([]auth.Access, error)
}

type ProviderConfig struct {
	Name             string               `yaml:"name"`
	OIDCDiscoveryURL string               `yaml:"oidcDiscoveryURL"`
	StaticKeys       []StaticKeyConfig    `yaml:"staticKeys"`
	Authentication   AuthenticationConfig `yaml:"authn"`
	Authorization    AuthorizationConfig  `yaml:"authz"`
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	ListenAddress string `yaml:"listenAddress"`
	TokenPath     string `yaml:"tokenPath"`
}

type StaticKeyConfig struct {
	Key string `yaml:"key"`
}

type TokenConfig struct {
	CertFile string        `yaml:"certificate"`
	Issuer   string        `yaml:"issuer"`
	KeyFile  string        `yaml:"key"`
	Duration time.Duration `yaml:"duration"`
}