server

type CORSConfig struct {
	// Enable CORS for the server (default: true)
	Enabled          bool     `mapstructure:"enabled" json:"enabled" default:"true"`
	AllowedOrigins   []string `mapstructure:"allowedorigins" json:"allowedorigins"`
	AllowedMethods   []string `mapstructure:"allowedmethods" json:"allowedmethods" default:"[\"GET\",\"POST\",\"PATCH\",\"DELETE\",\"OPTIONS\"]"`
	AllowedHeaders   []string `` /* 256-byte string literal not displayed */
	ExposedHeaders   []string `mapstructure:"exposedheaders" json:"exposedheaders"`
	AllowCredentials bool     `mapstructure:"allowcredentials" json:"allowcredentials" default:"true"`
	MaxAge           int      `mapstructure:"maxage" json:"maxage" default:"3600"`
	Debug            bool     `mapstructure:"debug" json:"debug"`

	// Additive fields - appended to base lists at runtime without replacing defaults
	AdditionalMethods        []string `mapstructure:"additionalmethods" json:"additionalmethods"`
	AdditionalHeaders        []string `mapstructure:"additionalheaders" json:"additionalheaders"`
	AdditionalExposedHeaders []string `mapstructure:"additionalexposedheaders" json:"additionalexposedheaders"`
}

type Config struct {
	Auth auth.Config `mapstructure:"auth" json:"auth"`

	Cache cache.Config `mapstructure:"cache" json:"cache"`

	GRPC GRPCConfig `mapstructure:"grpc" json:"grpc"`
	// To Deprecate: Use the WithKey[X]Provider StartOptions to register trust providers.
	CryptoProvider          security.Config                          `mapstructure:"cryptoProvider" json:"cryptoProvider"`
	TLS                     TLSConfig                                `mapstructure:"tls" json:"tls"`
	CORS                    CORSConfig                               `mapstructure:"cors" json:"cors"`
	WellKnownConfigRegister func(namespace string, config any) error `mapstructure:"-" json:"-"`

	// Programmatic interceptors injected at startup (not loaded from config)
	ExtraConnectInterceptors []ExtraInterceptor `mapstructure:"-" json:"-"`
	ExtraIPCInterceptors     []ExtraInterceptor `mapstructure:"-" json:"-"`
	// Port to listen on
	Port           int    `mapstructure:"port" json:"port" default:"8080"`
	Host           string `mapstructure:"host,omitempty" json:"host"`
	PublicHostname string `mapstructure:"public_hostname,omitempty" json:"publicHostname"`
	// Http server config
	HTTPServerConfig HTTPServerConfig `mapstructure:"http" json:"http"`
	// Enable pprof
	EnablePprof bool `mapstructure:"enable_pprof" json:"enable_pprof" default:"false"`
	// Trace is for configuring open telemetry based tracing.
	Trace tracing.Config `mapstructure:"trace" json:"trace"`

	// AuthzResolverRegistry contains service-registered resolvers used by the auth interceptor.
	AuthzResolverRegistry *authz.ResolverRegistry `mapstructure:"-" json:"-"`
}

type ConnectRPC struct {
	Mux *http.ServeMux
	// Interceptors are the handler options for services registered with a
	// connect-go v1 handler.
	Interceptors []connect.HandlerOption
	// ServerInterceptors wrap every service registered on a connect-go v2 server.
	ServerInterceptors []connectv2.ServerInterceptor
	// MountOptions apply to every connect-go v2 service; options a service
	// supplies follow them.
	MountOptions      []connecthttp.Option
	ServiceReflection []string
	// contains filtered or unexported fields
}

type Error string

type ExtraInterceptor struct {
	// Name identifies the interceptor in startup errors.
	Name string
	// V1 runs on services registered with a connect-go v1 handler.
	V1 connect.Interceptor
	// V2 runs on services registered with a connect-go v2 server.
	V2 connectv2.ServerInterceptor
}

type GRPCConfig struct {
	// Enable reflection for grpc server (default: true)
	ReflectionEnabled bool `mapstructure:"reflectionEnabled" json:"reflectionEnabled" default:"true"`

	// MaxRecvMsgSizeBytes caps each request message that external clients send to
	// Connect, gRPC, and gRPC-Web handlers, measured after decompression.
	MaxRecvMsgSizeBytes int `mapstructure:"maxRecvMsgSize" json:"maxRecvMsgSize" default:"4194304"` // 4MB = 4 * 1024 * 1024 = 4194304

	// MaxCallRecvMsgSizeBytes and MaxCallSendMsgSizeBytes configure the in-process client used for IPC.
	MaxCallRecvMsgSizeBytes int `mapstructure:"maxCallRecvMsgSize" json:"maxCallRecvMsgSize" default:"4194304"` // 4MB = 4 * 1024 * 1024 = 4194304
	MaxCallSendMsgSizeBytes int `mapstructure:"maxCallSendMsgSize" json:"maxCallSendMsgSize" default:"4194304"` // 4MB = 4 * 1024 * 1024 = 4194304
}

type HTTPServerConfig struct {
	ReadTimeout       time.Duration `mapstructure:"readTimeout" json:"readTimeout"`
	ReadHeaderTimeout time.Duration `mapstructure:"readHeaderTimeout" json:"readHeaderTimeout"`
	WriteTimeout      time.Duration `mapstructure:"writeTimeout" json:"writeTimeout"`
	IdleTimeout       time.Duration `mapstructure:"idleTimeout" json:"idleTimeout"`
	MaxHeaderBytes    int           `mapstructure:"maxHeaderBytes" json:"maxHeaderBytes"`
	TrustedProxies    []string      `mapstructure:"trustedProxies" json:"trustedProxies"`
}

type OpenTDFServer struct {
	AuthN               *auth.Authentication
	HTTPMux             *http.ServeMux
	HTTPServer          *http.Server
	ConnectRPCInProcess *inProcessServer
	ConnectRPC          *ConnectRPC
	CacheManager        *cache.Manager

	// To Deprecate: Use the TrustKeyIndex and TrustKeyManager instead
	CryptoProvider *security.StandardCrypto
	Listener       net.Listener

	PublicHostname string
	// contains filtered or unexported fields
}

type TLSConfig struct {
	// Enable TLS for the server (default: false)
	Enabled bool `mapstructure:"enabled" json:"enabled" default:"false"`
	// Path to the certificate file
	Cert string `mapstructure:"cert" json:"cert"`
	// Path to the key file
	Key string `mapstructure:"key" json:"key"`
}