api

type Account struct {
	// Users that belong to the account.
	Users []*ConfigUser `json:"users,omitempty"`

	// Exports are the exports from this account.
	Exports []*Export `json:"exports,omitempty"`

	// Imports are the imports from this account.
	Imports []*Import `json:"imports,omitempty"`
}

type AuthConfig struct {
	// Users that belong to the global account.
	Users []*ConfigUser `json:"users"`

	// Accounts that separate the subject namespaces.
	Accounts map[string]*Account `json:"accounts,omitempty"`
}

type ConfigUser struct {
	Username    string       `json:"username,omitempty"`
	Password    string       `json:"password,omitempty"`
	Nkey        string       `json:"nkey,omitempty"`
	Permissions *Permissions `json:"permissions,omitempty"`
}

type Export struct {
	Stream   string   `json:"stream,omitempty"`
	Service  string   `json:"service,omitempty"`
	Accounts []string `json:"accounts,omitempty"`
	Response string   `json:"response,omitempty"`
}

type GenericImport struct {
	Account string `json:"account,omitempty"`
	Subject string `json:"subject,omitempty"`
}

type Import struct {
	Service      *GenericImport `json:"service,omitempty"`
	Stream       *GenericImport `json:"stream,omitempty"`
	StreamPrefix string         `json:"prefix,omitempty"`
	ServiceTo    string         `json:"to,omitempty"`
}

type PermissionRules struct {
	Allow []string `json:"allow,omitempty"`
	Deny  []string `json:"deny,omitempty"`
}

type Permissions struct {
	// Publish are the publish permissions.
	Publish *PermissionRules `json:"publish,omitempty"`

	// Subscribe are the subscriber permissions.
	Subscribe *PermissionRules `json:"subscribe,omitempty"`
}

type User struct {
	// Username
	Username string `json:"username,omitempty"`

	// Password
	Password string `json:"password,omitempty"`

	// Nkey
	Nkey string `json:"nkey,omitempty"`

	// FIXME: Change into role and consolidate into a single type?
	// it would have to be filtered out on export though since
	// cannot have an extra field that is not recognized by the
	// server.
	Permissions string `json:"permissions,omitempty"`

	// Account is the account on which this user exists,
	// by default being the global account.
	Account string `json:"account,omitempty"`
}