config

type Config struct {
	SignerProxy     SignerProxyConfig     `yaml:"signer_proxy"`
	VerifierProxies []VerifierProxyConfig `yaml:"verifier_proxies"`
}

type DefaultVerifierProxyConfig VerifierProxyConfig

type RegistrableComponentConfig struct {
	Type    string                 `yaml:"type"`
	Options map[string]interface{} `yaml:"options"`
}

type SignerConfig struct {
	SignerParams `yaml:",inline"`
	PrivateKey   RegistrableComponentConfig `yaml:"private_key"`
}

type SignerParams struct {
	Issuer         string        `yaml:"issuer"`
	ExpirationTime time.Duration `yaml:"expiration_time"`
	MaxSkew        time.Duration `yaml:"max_skew"`
	NonceLength    int           `yaml:"nonce_length"`
}

type SignerProxyConfig struct {
	Enabled             bool          `yaml:"enabled"`
	ListenAddr          string        `yaml:"listen_addr"`
	ShutdownTimeout     time.Duration `yaml:"shutdown_timeout"`
	CAKeyFile           string        `yaml:"ca_key_file"`
	CACrtFile           string        `yaml:"ca_crt_file"`
	TrustedCertificates []string      `yaml:"trusted_certificates"`
	Signer              SignerConfig  `yaml:"signer"`
}

type URL struct {
	*url.URL
}

type VerifierConfig struct {
	Upstream        URL                          `yaml:"upstream"`
	Audience        URL                          `yaml:"audience"`
	MaxSkew         time.Duration                `yaml:"max_skew"`
	MaxTTL          time.Duration                `yaml:"max_ttl"`
	KeyServer       RegistrableComponentConfig   `yaml:"key_server"`
	NonceStorage    RegistrableComponentConfig   `yaml:"nonce_storage"`
	ClaimsVerifiers []RegistrableComponentConfig `yaml:"claims_verifiers"`
}

type VerifierProxyConfig struct {
	Enabled         bool           `yaml:"enabled"`
	ListenAddr      string         `yaml:"listen_addr"`
	ShutdownTimeout time.Duration  `yaml:"shutdown_timeout"`
	CrtFile         string         `yaml:"crt_file"`
	KeyFile         string         `yaml:"key_file"`
	Verifier        VerifierConfig `yaml:"verifier"`
}