bundle

type Attribute struct {
	Key   string `json:"key"`
	Value string `json:"value"`
}

type Attributes []*Attribute

type Config struct {
	Bundles   []*ResourceBundleService `json:"bundles"`
	Namespace string                   `json:"namespace"`
}

type ExemptionURLs struct {
	Public     Rules `json:"public"`     // public urls are not controlled by AuthN and AuthZ
	Privileged Rules `json:"privileged"` // privileged urls can only be visited by system admins
	Registered Rules `json:"registered"` // registered urls are the entire list of urls which are controlled by AuthZ, which means that if an url is not in this list, it is not controlled by AuthZ
}

type ResourceBundle map[string]resources

type ResourceBundleService struct {
	Endpoint     string `json:"endpoint"`
	ResourceType string `json:"resourceType"`
}

type ResourceSpec struct {
	ResourceID  string   `json:"resourceID"`
	ProjectName string   `json:"projectName"`
	Spec        []string `json:"spec"`
}

type Rule struct {
	Method           string       `json:"method"`
	Endpoint         string       `json:"endpoint"`
	ResourceType     string       `json:"resourceType,omitempty"`
	IDRegex          string       `json:"idRegex,omitempty"`
	MatchAttributes  Attributes   `json:"matchAttributes,omitempty"`
	MatchExpressions []expression `json:"matchExpressions,omitempty"`
}

type Rules []*Rule