certs

type Action struct {
	// ActionType is the type of action.
	ActionType ActionType `json:"action_type"`
}

type ActionType struct {
	AutoRenew     string `json:"AutoRenew"`
	EmailContacts string `json:"EmailContacts"`
}

type AdminDetails struct {
	// Email provides the email address of an administrator.
	Email string `json:"email"`
	// First is the admin's first name.
	First string `json:"first_name"`
	// Last is the admin's last name.
	Last string `json:"last_name"`
	// Phone is the amdin's phone number.
	Phone string `json:"phone"`
}

type Attributes struct {
	// RecoveryLevel is the level of recovery for this password when deleted.  See the description of
	// DeletionRecoveryLevel above.
	RecoveryLevel DeletionRecoveryLevel `json:"recoveryLevel,omitempty"`
	// RecoverableDays is the soft delete data retention days. Must be >=7 and <=90, otherwise 0.
	RecoverableDays int `json:"recoverableDays,omitempty"`
	// Enabled indicates if the secret is currently enabled.
	Enabled bool `json:"enabled,omitempty"`
	// Created indicates the time the secret was created in UTC. If set to the zero value, it indicates
	// this was not set.
	Created *values.Time `json:"created,omitempty"`
	// NotBefore indicate that the key isn"t valid before this time in UTC. If set to the zero value, it indicates
	// this was not set.
	NotBefore values.Time `json:"nbf,omitempty"`
	// Updated indicates the last time the secret was updated in UTC. If set to the zero value, it indicates
	// this was not set.
	Updated values.Time `json:"updated,omitempty"`
	// Expiry is the expiry date of the certificate.
	Expiry values.Time `json:"exp,omitempty"`
}

type Base struct {
	Attributes Attributes `json:"attributes,omitempty"`
	// ID is the id of the certificate.
	ID string `json:"id"`
	// Tags are application specific metadata key/value pairs.
	Tags map[string]string `json:"tags,omitempty"`
	// Thumbprint is the thumbprint of the certificate.
	Thumbprint string `json:"x5t,omitempty"`
}

type Bundle struct {
	Base
	// CER is the PEM contents of the x509 certificate.
	CER string `json:"cer"`
	// Certs are the X509 certificates converted from the CER field.
	Certs []*x509.Certificate `json:"-"`
	// ContentType is the content type of the secret.
	// TODO(jdoak): I think this is a copy paste bug in their documentation.
	// Unless it is telling me the private key archive format that is in the secret store.
	ContentType string `json:"contentType,omitempty"`
	// KID is the key id.
	KID string `json:"kid,omitempty"`
	// Policy is the management policy.
	Policy Policy `json:"policy,omitempty"`
	// SID is the secret id that stores the private key.
	SID string `json:"sid,omitempty"`
}

type CertificateIssuerItem struct {
	// ID is the ID of the issuer.
	ID string `json:"id"`
	// Provider is the issuer provider.
	Provider string `json:"provider"`
}

type Client struct {
	// Conn is the connection to the keyvault service.
	Conn *conn.Conn
}

type Contact struct {
	// Name is the person's name.
	Name string `json:"name"`
	// Email is the contact's email.
	Email string `json:"email"`
	// Phone is the contact's phone.
	Phone string `json:"phone"`
}

type Contacts struct {
	// Contacts is the list of contacts for the vault certificates.
	Contacts []Contact `json:"contacts"`
	// ID is the identifier for the contacts collection.
	ID string `json:"id"`
}

type CurveName struct {
	P256  string `json:"P-256"`
	P256K string `json:"P-256K"`
	P384  string `json:"P-384"`
	P521  string `json:"P-521"`
}

type DeletedBundle struct {
	Bundle
	// Deleted is the time when the certificate was deleted.
	Deleted values.Time `json:"deletedDate"`
	// ScheduledPurge is when the certificate is scheduled to be purged.
	ScheduledPurge values.Time `json:"scheduledPurgeDate"`
	// RecoveryID is the url of the recovery object used to recovery the deleted certificate.
	RecoveryID string `json:"recoveryId"`
}

type DeletedCertMeta struct {
	Attributes Attributes        `json:"attributes"`
	Deleted    values.Time       `json:"deletedDate"`
	ID         string            `json:"id"`
	RecoveryID string            `json:"recoveryId"`
	Scheduled  values.Time       `json:"scheduledPurgeDate"`
	Tags       map[string]string `json:"tags"`
	Thumbprint string            `json:"x5t"`
}

type DeletionRecoveryLevel string

type ImportOption func(i *importReq)

type Issuer struct {
	// Attributes is the attributes of the issuer.
	Attributes IssuerAttr `json:"attributes"`
	// Credentials is the credentials to be used for the issuer.
	Credentials IssuerCreds `json:"credentials"`
	// ID is issuer id.
	ID string `json:"id"`
	// Org details the organization provided to the issuer.
	Org Org `json:"org_details"`
	// Provider is the issuer provider.
	Provider string `json:"provider"`
}

type IssuerAttr struct {
	// Created is the time the issuer was created.
	Created values.Time `json:"created"`
	// Updated is the last time the issuer was updatd.
	Updated values.Time `json:"updated"`
	// Enabled indicates if the issuer is enabled.
	Enabled bool `json:"enabled"`
}

type IssuerCreds struct {
	// ID is the username/account name/account id.
	ID string `json:"account_id"`
	// Secret is the password/secret/account key.
	Secret string `json:"pwd"`
}

type IssuerParams struct {
	// Transparency indicates if the certificates generated under this policy should be published to certificate transparency logs.
	Transparency bool `json:"cert_transparency"`
	// Type is the certificate type as supported by the provider (optional); for example 'OV-SSL', 'EV-SSL'.
	Type string `json:"cty"`
	// Name of the referenced issuer object or reserved names; for example, 'Self' or 'Unknown'.
	Name string
}

type KVError struct {
	// Code is the error code.
	Code string `json:"code"`
	// InnerError is the inner error.
	InnerError *KVError `json:"innererror"`
	// Message is the error message.
	Message string `json:"message"`
}

type KeyProps struct {
	// CurveName is the elliptical curve name.
	CurveName CurveName `json:"crv"`
	// Exportable indicates if the private key can be exported.
	Exportable bool `json:"exportable"`
	// Size is the key size in bits. For example: 2048, 3072, or 4096 for RSA.
	Size int `json:"key_size"`
	// Type is the type of key pair to be used for the certificate.
	Type KeyType `json:"kty"`
	// ReuseKey indicates if the same key pair will be used on certificate renewal.
	ReuseKey bool `json:"reuse_key"`
}

type KeyType struct {
	EC     string `json:"EC"`
	ECHSM  string `json:"EC-HSM"`
	RSA    string `json:"RSA"`
	RSAHSM string `json:"RSA-HSM"`
	OCT    string `json:"oct"`
}

type LifetimeAction struct {
	// Action is the action that will be executed.
	Action Action `json:"action"`
	// Trigger is the trigger that will trigger the action.
	Trigger Trigger `json:"trigger"`
}

type MergeOption func(m *mergeReq)

type Operation struct {
	// Cancellation indicates if cancellation was requested on the certificate operation.
	Cancellation bool `json:"cancellation_requested"`
	// CSR is the certificate signing request (CSR) that is being used in the certificate operation.
	CSR string `json:"csr"`
	// Error is the error encountered, if any, during the certificate operation.
	Error KVError `json:"error"`
	// ID is the certificate ID.
	ID string `json:"id"`
	// Issuer is the parameters for the issuer of the X509 component of a certificate.
	Issuer IssuerParams `json:"issuer"`
	// RequestID is the identifier for the certificate operation.
	RequestID string `json:"request_id"`
	// Status is the status of the certificate operation.
	Status string `json:"status"`
	// StatusDetails is the details of the certificate operation.
	StatusDetails string `json:"status_details"`
	// Target is the location which contains the result of the certificate operation.
	Target string `json:"target"`
}

type Org struct {
	// AdminDetails provides details about the org's administrators.
	AdminDetails []AdminDetails `json:"admin_details"`
	// ID is the id of the organization.
	ID string `json:"id"`
}

type Policy struct {
	// Attributes are the certificate attributes.
	Attributes Attributes `json:"attributes,omitempty"`
	// ID is the id of the certificate.
	ID string `json:"id"`
	// Issuer is parameters for the issuer of the X509 component of a certificate.
	Issuer IssuerParams `json:"issuer"`
	// KeyProps is the properties of the key backing a certificate.
	KeyProps KeyProps `json:"key_props"`
	// LifetimeActions are actions that will be performed by Key Vault over the lifetime of a certificate.
	LifetimeActions []LifetimeAction `json:"lifetime_actions"`
	// SecretPops is properites of the secret backing a certificate.
	SecretProps SecretProps `json:"secret_props"`
	// X509Props are properties of the X509 component of a certificate.
	X509Props X509Props `json:"x509_props"`
}

type SecretProps struct {
	// ContentType is the media type (MIME type) of the secret key (also known as the private key).
	ContentType string `json:"contentType"`
}

type SubjectAlternativeNames struct {
	// DNSNames are DNS names.
	DNSNames []string `json:"dns_names"`
	// Emails are email addresses.
	Emails []string `json:"emails"`
	// UPNS are user principal names.
	UPNS []string `json:"upns"`
}

type Trigger struct {
	// DaysUntilExpiry is the days before expiry to attempt renewal.
	// Value should be between 1 and validity_in_months multiplied by 27.
	// If validity_in_months is 36, then value should be between 1 and 972 (36 * 27).
	DaysUntilExpiry int `json:"days_before_expiry"`
	// LifetimePercentage is the percentage of lifetime at which to trigger. Value should be between 1 and 99.
	LifetimePercentage int `json:"lifetime_percentage"`
}

type X509Props struct {
	// EKUS is the enhanced key usage.
	EKUS []string `json:"ekus"`
	// KeyUsage is a list of key usages.
	KeyUsage []string `json:"key_usage"`
	// SANS is the subject alternative names.
	SANS SubjectAlternativeNames `json:"sans"`
	// Subject is the subject name. Should be a valid x509 distiguished name.
	Subject string `json:"subject"`
	// ValidityMonths is the duration in months that the certificate is valid.
	ValidityMonths int `json:"validity_months"`
}