config

type Config struct {
	Targets []Target          `json:"targets"`
	Users   UsersProviderOIDC `json:"users"`
	Policy  PolicyConfig      `json:"policy"`
	Facade  FacadeConfig      `json:"facade"`
	Storage PostgresConfig    `json:"storage"`
}

type Connection struct {
	Host        string `json:"host"`
	Port        int    `json:"port"`
	User        string `json:"user"`
	Password    string `json:"password"`
	DB          string `json:"db"`
	UseSSL      bool   `json:"use_ssl"`
	MaxPoolSize int    `json:"max_pool_size"`
}

type FacadeConfig struct {
	Port               int    `json:"port"`
	CookieSecret       string `json:"cookie_secret"`
	UnsafeCORSAllowAll bool   `json:"unsafe_cors_allow_all"`
}

type Op string

type PolicyConfig struct {
	Path string `json:"path"` // directory with .rego modules; relative paths are resolved from the config file location
}

type PostgresConfig struct {
	Host        string `json:"host"`
	Port        int    `json:"port"`
	Database    string `json:"database"`
	Username    string `json:"username"`
	Password    string `json:"password"`
	UseSSL      bool   `json:"use_ssl"`
	MaxPoolSize int    `json:"max_pool_size"`
}

type Role string

type Target struct {
	ID            TargetID      `json:"id"`
	Description   string        `json:"description"`
	Tags          []string      `json:"tags"`
	Type          string        `json:"type"`
	Connection    Connection    `json:"connection"`
	DefaultSchema string        `json:"default_schema"`
	Tables        []TargetTable `json:"tables"`
}

type TargetID string

type TargetTable struct {
	Table  string   `json:"table"`
	Fields []string `json:"fields"`
}

type UserID string

type UsersProviderOIDC struct {
	ClientID            string          `json:"client_id"`
	ClientSecret        string          `json:"client_secret"`
	IssuerURL           string          `json:"issuer_url"`
	RedirectURL         string          `json:"redirect_url"`
	Scopes              []string        `json:"scopes"`
	AccessTokenAudience string          `json:"access_token_audience"`
	RoleClaim           string          `json:"role_claim"            validate:"required"`
	RoleMapping         map[string]Role `json:"role_mapping"          validate:"required"`
}