cdn

type CloudCDN struct {
	// contains filtered or unexported fields
}

type CloudCDNConfig struct {
	// Domain is the load balancer host (see ParseDomain).
	Domain string
	// KeyName names the key on the backend bucket.
	KeyName string
	// Key is the key file's contents: 128 random bits, base64url, as
	// "gcloud compute backend-buckets add-signed-url-key" reads them.
	Key []byte
	// PathPrefix is the path inside the bucket that the load balancer maps
	// to its root; empty when it serves the bucket root.
	PathPrefix string
	// Now is the clock; nil means time.Now.
	Now func() time.Time
}

type CloudFront struct {
	// contains filtered or unexported fields
}

type CloudFrontConfig struct {
	// Domain is the distribution host (see ParseDomain).
	Domain string
	// KeyPairID is the ID of the public key, in one of the distribution's
	// trusted key groups, that matches PrivateKey.
	KeyPairID string
	// PrivateKey is the PEM private key: RSA as PKCS#1 or PKCS#8, or ECDSA
	// as SEC 1 or PKCS#8.
	PrivateKey []byte
	// Hash is HashSHA1 (the default) or HashSHA256.
	Hash string
	// PathPrefix is the distribution origin's path inside the bucket; empty
	// when the origin is the bucket root.
	PathPrefix string
	// Now is the clock; nil means time.Now.
	Now func() time.Time
}

type FrontDoor struct {
	// contains filtered or unexported fields
}

type FrontDoorConfig struct {
	// Endpoint is the Front Door endpoint host, such as
	// "artifacts-abc123.z01.azurefd.net" (see ParseDomain).
	Endpoint string
	// PathPrefix is the route's origin path: the leading part of
	// "<container>/<blob name>" that the endpoint leaves out, for example the
	// container when the origin path is "/<container>". Empty when the
	// endpoint path is the whole storage path.
	PathPrefix string
}

type Request struct {
	// TTL is the least time the URL stays valid once handed out.
	TTL time.Duration
	// Filename and ContentType, when set, travel as response overrides the
	// CDN passes to the origin and keys its cache on.
	Filename    string
	ContentType string
}

type Signer interface {
	// Provider names the CDN for logs and errors, for example "cloudfront".
	Provider() string
	// Covers returns an error unless every object key under storePrefix
	// has a path on the CDN: a CDN whose origin is a folder of the bucket
	// reaches only the keys inside it.
	Covers(storePrefix string) error
	// Sign returns a URL for objectKey, the key under the bucket's root.
	Sign(objectKey string, r Request) (string, error)
}