lastkeypair

type AuthorizationLambda struct {
	// contains filtered or unexported fields
}

type CertificateOptions struct {
	ForceCommand          *string `json:",omitempty"`
	SourceAddress         *string `json:",omitempty"`
	PermitX11Forwarding   bool
	PermitAgentForwarding bool
	PermitPortForwarding  bool
}

type HostCertReqJson struct {
	EventType string
	Token     Token
	PublicKey string
}

type HostCertRespJson struct {
	SignedHostPublicKey string
}

type Jumpbox struct {
	Address            string
	User               string
	HostKeyAlias       string
	Principals         []string
	SignedPublicKey    string
	CertificateOptions *CertificateOptions
}

type Keypair struct {
	PrivateKey []byte
	PublicKey  []byte
}

type LambdaConfig struct {
	KeyId                string
	KmsTokenIdentity     string
	CaKeyBytes           []byte
	CaKeyPassphraseBytes []byte
	ValidityDuration     int64
	AuthorizationLambda  string
}

type LkpHostCertAuthorizationRequest struct {
	Kind            string
	From            authorizationLambdaIdentity
	HostInstanceArn string
	Principals      []string
}

type LkpHostCertAuthorizationResponse struct {
	Authorized bool
	KeyId      string
	Principals []string
}

type LkpUserCertAuthorizationRequest struct {
	Kind              string
	From              authorizationLambdaIdentity
	RemoteInstanceArn string
	SshUsername       string
	Vouchers          []authorizationLambdaVoucher `json:",omitempty"`
}

type LkpUserCertAuthorizationResponse struct {
	Authorized         bool
	Message            string
	Principals         []string
	Jumpboxes          []Jumpbox `json:",omitempty"`
	TargetAddress      string    `json:",omitempty"`
	CertificateOptions *CertificateOptions
}

type PlaintextPayload struct {
	NotBefore int64 // this is what json.unmarshal wants
	NotAfter  int64
}

type ReifiedLogin struct {
	InstanceArn string

	Request  *UserCertReqJson
	Response *UserCertRespJson
	// contains filtered or unexported fields
}

type StsIdentity struct {
	AccountId string
	UserId    string
	Username  string
	Type      string
}

type Token struct {
	Params    TokenParams
	Signature []byte
}

type TokenParams struct {
	FromId      string
	FromAccount string
	To          string
	Type        string

	// optional fields below this comment
	FromName string         `json:",omitempty"`
	Vouchee  string         `json:",omitempty"`
	Context  string         `json:",omitempty"`
	Vouchers []VoucherToken `json:",omitempty"`

	// the reason we have both these fields (rather than overloading one "InstanceArn" field)
	// is because we want to specify a KMS key policy that HostInstanceArn _MUST_ match
	// the ec2:SourceInstanceARN if it exists. if we didn't do this, then anyone _not_ on
	// an instance could request a host cert.
	HostInstanceArn   string `json:",omitempty"` // this field is for when an instance is requesting a host cert
	RemoteInstanceArn string `json:",omitempty"` // this field is for when a user is requesting a user cert for a specific host

	SshUsername string   `json:",omitempty"` // username on remote instance that user wants to access
	Principals  []string `json:",omitempty"` // additional principals to include in cert
}

type UserCertReqJson struct {
	// NOTE: be very careful of adding new fields to this struct. only fields
	// inside Token.TokenParams are part of the encryption context (and hence
	// logged in cloudtrail)
	EventType string
	Token     Token
	PublicKey string
}

type UserCertRespJson struct {
	SignedPublicKey string
	Jumpboxes       []Jumpbox `json:",omitempty"`
	TargetAddress   string    `json:",omitempty"`
	Expiry          int64
}

type VoucherToken Token