token

type Config struct {
	Name     string     `yaml:"name" validate:"required"`
	State    TokenState `yaml:"state" validate:"required"`
	Rotation *Rotation  `yaml:"rotation,omitempty"`
	Source   Source     `yaml:"source" validate:"required"`
	Vault    Vault      `yaml:"vault" validate:"required"`
}

type Rotation struct {
	RotateBefore time.Duration `yaml:"rotate_before" validate:"required"`
	Validity     time.Duration `yaml:"validity" validate:"required"`
}

type Source struct {
	Name        string   `yaml:"name" validate:"required"`
	Description string   `yaml:"description"`
	Type        string   `yaml:"type" validate:"required"` // personal, project, group, ...
	Owner       string   `yaml:"owner"`                    // user/project/group ID or full name
	Role        string   `yaml:"role"`
	Scopes      []string `yaml:"scopes" validate:"required"`
}

type Status struct {
	SourceID  string `yaml:"token_id"`
	VaultID   string `yaml:"vault_id"`
	ItemID    string `yaml:"item_id"`
	ExpiresAt string `yaml:"expires_at"`
}

type Token struct {
	Name        string
	Description string
	Scopes      []string
	Type        string
	Owner       string
	Value       string
	Expiration  time.Time
}

type TokenState string

type Vault struct {
	// OrgID is an optional organization ID, required for bitwarden
	OrgID string `yaml:"orgID"`
	// PathID is an optional vault or project ID, used by 1password as vault ID
	PathID string `yaml:"pathID"`
	// ItemID is an optional ID for a vault item, used by 1password as item ID
	ItemID string `yaml:"itemID"`
	// Path is the name of the vault or project
	Path string `yaml:"path" validate:"required"`
	// Item is the name of the vault item
	Item string `yaml:"item" validate:"required"`
	// Field is the name of the password field, does not apply for bitwarden
	Field string `yaml:"field" validate:"required"`
}