adminapi

type APIToken struct {
	// Admin The admin the token acts as.
	Admin       string     `json:"admin"`
	CreatedAt   time.Time  `json:"createdAt"`
	Description string     `json:"description"`
	ExpiresAt   *time.Time `json:"expiresAt,omitempty"`
	Id          string     `json:"id"`
	LastUsed    *time.Time `json:"lastUsed,omitempty"`
}

type APITokenCreate struct {
	Description *string `json:"description,omitempty"`

	// TtlSeconds Lifetime in seconds; 0 never expires.
	TtlSeconds int `json:"ttlSeconds"`
}

type APITokenCreated struct {
	Secret string   `json:"secret"`
	Token  APIToken `json:"token"`
}

type AuditEntry struct {
	Action string    `json:"action"`
	Actor  string    `json:"actor"`
	Detail string    `json:"detail"`
	Id     int64     `json:"id"`
	Target string    `json:"target"`
	Time   time.Time `json:"time"`
}

type AuthKey struct {
	CreatedAt   time.Time  `json:"createdAt"`
	Description string     `json:"description"`
	ExpiresAt   *time.Time `json:"expiresAt,omitempty"`
	Id          string     `json:"id"`
	Reusable    bool       `json:"reusable"`
	Revoked     bool       `json:"revoked"`

	// Tags Given to nodes the key enrolls.
	Tags      []string `json:"tags"`
	UsedCount int      `json:"usedCount"`

	// Valid Whether it can still enroll a node.
	Valid bool `json:"valid"`
}

type AuthKeyCreate struct {
	Description *string   `json:"description,omitempty"`
	Reusable    bool      `json:"reusable"`
	Tags        *[]string `json:"tags,omitempty"`

	// TtlSeconds Lifetime in seconds; 0 means the key never expires.
	TtlSeconds int `json:"ttlSeconds"`
}

type AuthKeyCreated struct {
	Key    AuthKey `json:"key"`
	Secret string  `json:"secret"`
}

type AuthMethods struct {
	Oidc bool `json:"oidc"`

	// OidcName Label for the single sign-on button.
	OidcName *string `json:"oidcName,omitempty"`
	Password bool    `json:"password"`
}

type ChangePasswordJSONRequestBody = PasswordChange

type CheckPolicyJSONRequestBody = PolicyCheck

type CompleteSetupJSONRequestBody = SetupRequest

type CreateAPITokenJSONRequestBody = APITokenCreate

type CreateAuthKeyJSONRequestBody = AuthKeyCreate

type DNSConfig struct {
	// Domain Example: mesh.internal
	Domain string `json:"domain"`

	// MagicDNS Nodes answer <node>.<domain> at 100.100.100.100.
	MagicDNS bool       `json:"magicDNS"`
	Split    []SplitDNS `json:"split"`
}

type Error struct {
	Error string `json:"error"`
}

type InvalidParamFormatError struct {
	ParamName string
	Err       error
}

type ListAuditParams struct {
	Limit *int `form:"limit,omitempty" json:"limit,omitempty"`

	// Before Only entries with a smaller id (paging).
	Before *int64 `form:"before,omitempty" json:"before,omitempty"`
}

type LoginJSONRequestBody = LoginRequest

type LoginRequest struct {
	Password string `json:"password"`
	Username string `json:"username"`
}

type Me struct {
	// HasPassword False for admins who only sign in through SSO.
	HasPassword bool   `json:"hasPassword"`
	Username    string `json:"username"`
}

type MiddlewareFunc func(http.Handler) http.Handler

type Node struct {
	Addresses []string `json:"addresses"`

	// AdvertisedRoutes Subnets the node offers to forward to; 0.0.0.0/0 offers an exit node.
	AdvertisedRoutes []string `json:"advertisedRoutes"`

	// ApprovedRoutes Routes an admin or the policy's autoApprovers allowed.
	ApprovedRoutes []string  `json:"approvedRoutes"`
	CreatedAt      time.Time `json:"createdAt"`
	Endpoints      []string  `json:"endpoints"`

	// ExpiresAt When the node must re-authenticate; null means never.
	ExpiresAt         *time.Time `json:"expiresAt,omitempty"`
	Hostname          string     `json:"hostname"`
	Id                string     `json:"id"`
	KeyExpiryDisabled bool       `json:"keyExpiryDisabled"`
	LastSeen          time.Time  `json:"lastSeen"`
	Name              string     `json:"name"`
	Online            bool       `json:"online"`
	Os                string     `json:"os"`

	// PublicKey WireGuard public key (base64).
	PublicKey string `json:"publicKey"`

	// Routes Routes in effect (advertised and approved).
	Routes []string `json:"routes"`
	Tags   []string `json:"tags"`
}

type NodeUpdate struct {
	// ApprovedRoutes Replaces the routes the node may use (CIDR).
	ApprovedRoutes *[]string `json:"approvedRoutes,omitempty"`

	// ExpireNow Expire the node's key immediately; it must re-authenticate.
	ExpireNow *bool `json:"expireNow,omitempty"`

	// KeyExpiryDisabled Exempt the node from key expiry, or subject it again (expiry restarts now).
	KeyExpiryDisabled *bool   `json:"keyExpiryDisabled,omitempty"`
	Name              *string `json:"name,omitempty"`

	// Tags Replaces the node's tags, e.g. ["tag:server"].
	Tags *[]string `json:"tags,omitempty"`
}

type OIDCConfig struct {
	Issuer       string
	ClientID     string
	ClientSecret string
	// RedirectURL is registered with the provider; empty derives it from
	// the public URL setting or the request.
	RedirectURL string
	// Allowed lists who may sign in: exact email addresses, or "@domain"
	// for a whole domain. Empty allows nobody.
	Allowed []string
	// Name labels the sign-in button, e.g. "Google".
	Name string
}

type OidcCallbackParams struct {
	Code  *string `form:"code,omitempty" json:"code,omitempty"`
	State *string `form:"state,omitempty" json:"state,omitempty"`
	Error *string `form:"error,omitempty" json:"error,omitempty"`
}

type Options struct {
	// SetupCode is the first-run setup code; random if empty.
	SetupCode string
	// OIDC enables single sign-on; nil disables it.
	OIDC *OIDCConfig
}

type PasswordChange struct {
	CurrentPassword string `json:"currentPassword"`
	NewPassword     string `json:"newPassword"`
}

type Policy struct {
	// Policy HuJSON policy document.
	Policy string `json:"policy"`
}

type PolicyCheck struct {
	// Dst Node name or IPv4 address (may be inside a route).
	Dst string `json:"dst"`

	// Policy Draft policy to check instead of the saved one.
	Policy *string           `json:"policy,omitempty"`
	Port   int               `json:"port"`
	Proto  *PolicyCheckProto `json:"proto,omitempty"`

	// Src Node name or IPv4 address.
	Src string `json:"src"`
}

type PolicyCheckProto string

type PolicyCheckResult struct {
	Allowed bool   `json:"allowed"`
	DstAddr string `json:"dstAddr"`
	Reason  string `json:"reason"`

	// Rule Index of the matching ACL.
	Rule    *int   `json:"rule,omitempty"`
	SrcAddr string `json:"srcAddr"`
}

type PolicyError struct {
	Details []string `json:"details"`
	Error   string   `json:"error"`
}

type RequiredHeaderError struct {
	ParamName string
	Err       error
}

type RequiredParamError struct {
	ParamName string
}

type ServeMux interface {
	HandleFunc(pattern string, handler func(http.ResponseWriter, *http.Request))
	http.Handler
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerInterface interface {

	// (GET /audit)
	ListAudit(w http.ResponseWriter, r *http.Request, params ListAuditParams)

	// (POST /auth/login)
	Login(w http.ResponseWriter, r *http.Request)

	// (POST /auth/logout)
	Logout(w http.ResponseWriter, r *http.Request)

	// (GET /auth/me)
	GetMe(w http.ResponseWriter, r *http.Request)

	// (GET /auth/methods)
	GetAuthMethods(w http.ResponseWriter, r *http.Request)

	// (GET /auth/oidc/callback)
	OidcCallback(w http.ResponseWriter, r *http.Request, params OidcCallbackParams)

	// (GET /auth/oidc/login)
	OidcLogin(w http.ResponseWriter, r *http.Request)

	// (POST /auth/password)
	ChangePassword(w http.ResponseWriter, r *http.Request)

	// (GET /authkeys)
	ListAuthKeys(w http.ResponseWriter, r *http.Request)

	// (POST /authkeys)
	CreateAuthKey(w http.ResponseWriter, r *http.Request)

	// (DELETE /authkeys/{id})
	RevokeAuthKey(w http.ResponseWriter, r *http.Request, id string)

	// (GET /dns)
	GetDNS(w http.ResponseWriter, r *http.Request)

	// (PUT /dns)
	SetDNS(w http.ResponseWriter, r *http.Request)

	// (GET /events)
	StreamEvents(w http.ResponseWriter, r *http.Request)

	// (GET /nodes)
	ListNodes(w http.ResponseWriter, r *http.Request)

	// (DELETE /nodes/{id})
	DeleteNode(w http.ResponseWriter, r *http.Request, id string)

	// (GET /nodes/{id})
	GetNode(w http.ResponseWriter, r *http.Request, id string)

	// (PATCH /nodes/{id})
	UpdateNode(w http.ResponseWriter, r *http.Request, id string)

	// (GET /policy)
	GetPolicy(w http.ResponseWriter, r *http.Request)

	// (PUT /policy)
	SetPolicy(w http.ResponseWriter, r *http.Request)

	// (POST /policy/check)
	CheckPolicy(w http.ResponseWriter, r *http.Request)

	// (GET /settings)
	GetSettings(w http.ResponseWriter, r *http.Request)

	// (PATCH /settings)
	UpdateSettings(w http.ResponseWriter, r *http.Request)

	// (GET /setup)
	GetSetup(w http.ResponseWriter, r *http.Request)

	// (POST /setup)
	CompleteSetup(w http.ResponseWriter, r *http.Request)

	// (GET /stats)
	GetStats(w http.ResponseWriter, r *http.Request)

	// (GET /tokens)
	ListAPITokens(w http.ResponseWriter, r *http.Request)

	// (POST /tokens)
	CreateAPIToken(w http.ResponseWriter, r *http.Request)

	// (DELETE /tokens/{id})
	DeleteAPIToken(w http.ResponseWriter, r *http.Request, id string)

	// (GET /topology)
	GetTopology(w http.ResponseWriter, r *http.Request)

	// (GET /version)
	GetVersion(w http.ResponseWriter, r *http.Request)
}

type ServerInterfaceWrapper struct {
	Handler            ServerInterface
	HandlerMiddlewares []MiddlewareFunc
	ErrorHandlerFunc   func(w http.ResponseWriter, r *http.Request, err error)
}

type SetDNSJSONRequestBody = DNSConfig

type SetPolicyJSONRequestBody = Policy

type Settings struct {
	// KeyExpiryDays Days a node key lasts before it must re-authenticate; 0 is forever.
	KeyExpiryDays int    `json:"keyExpiryDays"`
	NetworkPrefix string `json:"networkPrefix"`
	PublicURL     string `json:"publicURL"`
	RelayEnabled  bool   `json:"relayEnabled"`
	StunPort      int    `json:"stunPort"`
	Version       string `json:"version"`
}

type SettingsUpdate struct {
	KeyExpiryDays *int    `json:"keyExpiryDays,omitempty"`
	PublicURL     *string `json:"publicURL,omitempty"`
}

type SetupRequest struct {
	Password string `json:"password"`

	// PublicURL URL nodes use to reach the coordinator, e.g. https://mesh.example.com
	PublicURL *string `json:"publicURL,omitempty"`
	SetupCode string  `json:"setupCode"`
	Username  string  `json:"username"`
}

type SetupStatus struct {
	NeedsSetup bool `json:"needsSetup"`
}

type SplitDNS struct {
	// Domain Example: corp.example.com
	Domain string `json:"domain"`

	// Resolvers Example: ["10.0.0.53"]
	Resolvers []string `json:"resolvers"`
}

type Stats struct {
	Nodes  int `json:"nodes"`
	Online int `json:"online"`
}

type StdHTTPServerOptions struct {
	BaseURL          string
	BaseRouter       ServeMux
	Middlewares      []MiddlewareFunc
	ErrorHandlerFunc func(w http.ResponseWriter, r *http.Request, err error)
}

type TooManyValuesForParamError struct {
	ParamName string
	Count     int
}

type Topology struct {
	Links []TopologyLink `json:"links"`
}

type TopologyLink struct {
	// From Reporting node ID.
	From      string           `json:"from"`
	LatencyMs *float64         `json:"latencyMs,omitempty"`
	Path      TopologyLinkPath `json:"path"`

	// To Peer node ID.
	To string `json:"to"`
}

type TopologyLinkPath string

type UnescapedCookieParamError struct {
	ParamName string
	Err       error
}

type UnmarshalingParamError struct {
	ParamName string
	Err       error
}

type UpdateNodeJSONRequestBody = NodeUpdate

type UpdateSettingsJSONRequestBody = SettingsUpdate

type Version struct {
	Commit    string `json:"commit"`
	Date      string `json:"date"`
	GoVersion string `json:"goVersion"`
	Platform  string `json:"platform"`
	Version   string `json:"version"`
}