auth

const (
	// CONFIG_KEY_ALLOWED_HOST_REGEXP — no code within this module reads it
	// anymore, so setting this env var no longer has any effect here. It's
	// exported public API, though, so other repos may still reference it
	// directly; it's kept for now so any such references keep compiling
	// while we confirm they've migrated off it, and will be removed in a
	// follow-up once that's verified.
	//
	// Deprecated: use CONFIG_KEY_ALLOWED_HOSTS with IsValidSnykHost instead.
	//nolint:gosec // not a token value, but a configuration key
	CONFIG_KEY_ALLOWED_HOST_REGEXP = "INTERNAL_OAUTH_ALLOWED_HOSTS"
	// CONFIG_KEY_ALLOWED_HOSTS holds the allowlist of registrable domains
	// consulted by IsValidSnykHost. When set programmatically (e.g. via
	// Configuration.Set) it accepts a []string of multiple domains. When set
	// via the environment variable below, it supports a single domain only:
	// this key has no comma-splitting DefaultValueFunction, so GetStringSlice
	// returns the raw env var value as a one-element slice. For multiple
	// allowed domains, configure this key programmatically as a []string
	// rather than via the environment variable.
	//nolint:gosec // not a token value, but a configuration key
	CONFIG_KEY_ALLOWED_HOSTS        = "INTERNAL_OAUTH_ALLOWED_HOST_DOMAINS"
	CONFIG_KEY_OAUTH_TOKEN   string = "INTERNAL_OAUTH_TOKEN_STORAGE"
	OAUTH_CLIENT_ID          string = "b56d4c2e-b9e1-4d27-8773-ad47eafb0956"
	CALLBACK_HOSTNAME        string = "127.0.0.1"
	CALLBACK_PATH            string = "/authorization-code/callback"
	TIMEOUT_SECONDS                 = 120 * time.Second
	AUTHENTICATED_MESSAGE           = "Your account has been authenticated."
	PARAMETER_CLIENT_ID      string = "client-id"
	PARAMETER_CLIENT_SECRET  string = "client-secret"
	AUTH_TYPE_OAUTH                 = "oauth"
)

const (
	AUTH_TYPE_TOKEN                = "token"
	AUTH_TYPE_PAT                  = "pat"
	CACHED_PAT_KEY_PREFIX          = "cached_pat"
	CACHED_PAT_IS_VALID_KEY_PREFIX = "cached_pat_is_valid"
	CONFIG_KEY_TOKEN               = "api"      // the snyk config key for api token
	CONFIG_KEY_ENDPOINT            = "endpoint" // the snyk config key for api endpoint
	PAT_REGEX                      = `(snyk_(?:uat|sat))\.([a-z0-9]{8}\.[a-zA-Z0-9-_]+\.[a-zA-Z0-9-_]+)`
)