models

type AggregateEndpoint struct {
	Url        string `json:"url" yaml:"url" cloud:"url"`
	Identifier string `json:"identifier" yaml:"identifier" cloud:"identifier"`
}

type AggregateEndpoints []AggregateEndpoint

type AggregateRoute struct {
	// Name of your aggregate
	Name string `json:"name" yaml:"name" cloud:"name"`
	// Includes path for making aggregation
	// You can use globs:
	//   - appending /* will only make requests available in first level to aggregate
	//   - appending /** will mark everything to aggregate
	// e.g.: /app/**
	Includes PathMatchers `json:"includes" yaml:"includes" cloud:"includes"`
	// Excludes Same pattern has Includes but for excludes this time
	Excludes PathMatchers `json:"excludes" yaml:"excludes" cloud:"excludes"`
	// AllowedMethods Allowed method for aggregating, by default only GET is accepted
	AllowedMethods []string
	// Upstream URL where all request will be redirected
	// Query parameters can be passed, e.g.: http://localhost?param=1
	// User and password are given as basic auth too (this is not recommended to use it), e.g.: http://user:password@localhost
	Upstream *Upstream `json:"upstream" yaml:"upstream" cloud:"upstream"`
	// NoBuffer By default, response from upstream are buffered, it can be issue when sending big files
	// Set to true to stream response
	NoBuffer bool `json:"no_buffer" yaml:"no_buffer" cloud:"no_buffer"`
	// InsecureSkipVerify Set to true to not check SSL certificates from upstream (not really recommended)
	InsecureSkipVerify bool `json:"insecure_skip_verify" yaml:"insecure_skip_verify" cloud:"insecure_skip_verify"`
	// OptionsPassthrough Will forward directly to proxied route OPTIONS method without using middlewares
	OptionsPassthrough bool `json:"options_passthrough" yaml:"options_passthrough" cloud:"options_passthrough"`
	// Hosts Must match host
	Hosts HostMatchers `json:"hosts" yaml:"hosts" cloud:"hosts"`
	// Auth
	Auth Auth `json:"auth" yaml:"auth" cloud:"auth"`
	// Path
	Path string `json:"path" yaml:"path" cloud:"path"`
	// AggregateEndpoints endpoints
	AggregateEndpoints AggregateEndpoints `json:"aggregate_endpoints" yaml:"aggregate_endpoints" cloud:"aggregate_endpoints"`
	Identifier         string             `json:"identifier" yaml:"identifier" cloud:"identifier"`
}

type Auth struct {
	// Includes Where to do Auth
	Includes PathMatchers `json:"includes" yaml:"includes" cloud:"includes"`
	// Excludes Where not to do Auth
	Excludes PathMatchers `json:"excludes" yaml:"excludes" cloud:"excludes"`
	// Oauth2 auth
	Oauth2Auth            *Oauth2Auth `json:"oauth2" yaml:"oauth2" cloud:"oauth2"`
	OIDCAuth              *OIDCAuth   `json:"oidc" yaml:"oidc" cloud:"oidc"`
	BasicAuth             *BasicAuth  `json:"basic_auth" yaml:"basic" cloud:"basic_auth"`
	JWTCheck              JWTChecks   `json:"jwt_checks" yaml:"jwt_checks" cloud:"jwt_checks"`
	LoginPageTemplate     string      `json:"login_page_template" yaml:"login_page_template" cloud:"login_page_template"`
	LoginPageTemplatePath string      `json:"login_page_template_path" yaml:"login_page_template_path" cloud:"login_page_template_path"`
}

type BasicAuth struct {
	Username string   `json:"username" yaml:"username" cloud:"username"`
	Password string   `json:"password" yaml:"password" cloud:"password"`
	Scopes   []string `json:"scope" yaml:"scope" cloud:"scope"`
}

type CtxUpstream int

type HostMatcher struct {
	glob.Glob
	// contains filtered or unexported fields
}

type HostMatchers []*HostMatcher

type JWTCheck struct {
	// Alg Algorithm to use to validate the token
	// This is mandatory due to a security issue (see: https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries)
	Alg string `json:"alg" yaml:"alg" cloud:"alg"`
	// Secret or private key to verify the jwt
	// This is required
	Secret string `json:"secret" yaml:"secret" cloud:"secret"`
	// Issuer It will validate that the jwt contains this issuer
	Issuer string `json:"issuer" yaml:"issuer" cloud:"issuer"`
	// NotVerifyIssuedAt Set to true to not verify issued at of token (Useful when you have different time between user and server)
	NotVerifyIssuedAt bool `json:"not_verify_issued_at" yaml:"not_verify_expire" cloud:"not_verify_issued_at"`
}

type JWTChecks []JWTCheck

type OIDCAuth struct {
	ClientID     string   `json:"client_id" yaml:"client_id" cloud:"client_id"`
	ClientSecret string   `json:"client_secret" yaml:"client_secret" cloud:"client_secret"`
	Issuer       string   `json:"issuer" yaml:"issuer" cloud:"issuer"`
	Scopes       []string `json:"scopes" yaml:"scopes" cloud:"scopes"`
	RedirectURI  string   `json:"redirect_uri" yaml:"redirect_uri" cloud:"redirect_uri"`
	Endpoint     string   `json:"endpoint" yaml:"endpoint" cloud:"endpoint"`
	AuthPath     string   `json:"auth_path" yaml:"auth_path" cloud:"auth_path"`
	CallbackPath string   `json:"callback_path" yaml:"callback_path" cloud:"callback_path"`
}

type OIDCIdToken struct {
	Email         string `json:"email"`
	FamilyName    string `json:"family_name"`
	GivenName     string `json:"given_name"`
	PreferredName string `json:"preferred_username"`
	Name          string `json:"name"`
	EmailVerified bool   `json:"email_verified"`
	Sub           string `json:"sub"`
	Type          string `json:"typ"`
}

type Oauth2Auth struct {
	TokenURL     string   `json:"token_url" yaml:"token_url" cloud:"token_url"`
	ClientID     string   `json:"client_id" yaml:"client_id" cloud:"client_id"`
	ClientSecret string   `json:"client_secret" yaml:"client_secret" cloud:"client_secret"`
	ParamsAsJson bool     `json:"params_as_json" yaml:"params_as_json" cloud:"params_as_json"`
	TokenFormat  string   `json:"token_format" yaml:"token_format" cloud:"token_format"`
	Scopes       []string `json:"scopes" yaml:"scopes" cloud:"scopes"`
}

type PathMatcher struct {
	// contains filtered or unexported fields
}

type PathMatchers []*PathMatcher

type Upstream struct {
	URL     *url.URL
	Handler http.Handler
}