config

type Cedar struct {
	// PolicyPath is the path to Cedar policy files
	PolicyPath string
}

type ClientData struct {
	// SigningKeyIDFilePath is the file containing the key ID for the signing key.
	// The key itself is expected in the same directory as <keyID>.pem.
	// The loading is based on the internal/signing package.
	// The signing itself is based on github.com/openkcm/common-sdk/pkg/auth.
	SigningKeyIDFilePath string `yaml:"signingKeyIDFilePath"`
}

type Config struct {
	commoncfg.BaseConfig `mapstructure:",squash"`

	// gRPC server configuration
	GRPCServer GRPCServer `yaml:"grpcServer"`

	// Cedar configuration
	Cedar Cedar `yaml:"cedar"`

	// Client Certificate handling
	MTLS MTLS `yaml:"mtls"`

	// JWT Token handling
	JWT JWT `yaml:"jwt"`

	// ClientData configuration
	ClientData ClientData `yaml:"clientData"`

	// Session cache configuration (optional)
	SessionCache SessionCache `yaml:"sessionCache"`
}

type GRPCServer struct {
	commoncfg.GRPCServer `mapstructure:",squash"`

	// also embed client attributes for the gRPC health check client
	Client commoncfg.GRPCClient
}

type JWT struct {
	// IssuerClaimKeys configures the JWT issuer keys
	IssuerClaimKeys []string `yaml:"issuerClaimKeys" default:"['iss']"`

	// Define providers as k8s custom resources
	// Deprecated: use Providers and ProviderSource instead
	K8sProviders K8sProviders `yaml:"k8sProviders"`

	// A list of static JWT providers
	Providers []Provider `yaml:"providers"`

	// An optional gRPC source to dynamically lookup JWT providers
	ProviderSource commoncfg.GRPCClient `yaml:"providerSource"`

	// HTTP client configuration for interacting with OIDC providers
	HTTPClient commoncfg.HTTPClient `yaml:"httpClient"`
}

type MTLS struct {
	// TrustedSubjectsYaml is a path to a YAML file holding a list of
	// trusted client certificate subjects and their respective regions.
	TrustedSubjectsYaml string
}

type Provider struct {
	Issuer    string   `yaml:"issuer"`
	JwksURI   string   `yaml:"jwksURI"`
	Audiences []string `yaml:"audiences"`
}

type SessionCache struct {
	Enabled       bool   `yaml:"enabled"`
	Valkey        Valkey `yaml:"valkey"`
	CMKPathPrefix string `yaml:"cmkPathPrefix"`
}

type Valkey struct {
	Address   commoncfg.SourceRef `yaml:"address"`
	User      commoncfg.SourceRef `yaml:"user"`
	Password  commoncfg.SourceRef `yaml:"password"`
	Prefix    string              `yaml:"prefix"`
	SecretRef commoncfg.SecretRef `yaml:"secretRef"`
}