config

type Authenticator interface {
	SetPolicy(*Policy)
	// Authenticate ensures the request is authenticated. If it is not
	// authenticated, or authentication returns an error, Authenticate will
	// write a response and return a non-nil error.
	Authenticate(http.ResponseWriter, *http.Request) (*User, error)
	Logout(http.ResponseWriter, *http.Request)
}

type BasicAuthAuthenticator struct {
	Realm string
	// Passwords holds a map of usernames/passwords for basic auth. The keys
	// should match the keys in the Users map.
	Passwords map[string]string
	Policy    *Policy
	// contains filtered or unexported fields
}

type FileConfig struct {
	Port       string `yaml:"port"`
	AccountSid string `yaml:"twilio_account_sid"`
	AuthToken  string `yaml:"twilio_auth_token"`

	Realm services.Rlm `yaml:"realm"`
	// Default timezone for dates/times in the UI
	Timezone string `yaml:"default_timezone"`
	// List of timezones a user can choose in the UI
	Timezones  []string `yaml:"timezones"`
	PublicHost string   `yaml:"public_host"`

	// IP subnets that are allowed to visit the site. THIS IS NOT A SECURITY
	// FEATURE. IP ADDRESSES ARE EASILY SPOOFED, AND YOUR IP ADDRESS IS EASILY
	// DISCOVERABLE. To determine a user's ip address, we check the first value
	// in a X-Forwarded-For header, or the RemoteHost value of a http.Request.
	//
	// If you have an IPv4 address, the subnet for *only* that address is
	// "A.B.C.D/32". The recommended smallest subnet for IPv6 is /64.
	IPSubnets []string `yaml:"ip_subnets"`

	PageSize       uint          `yaml:"page_size"`
	SecretKey      string        `yaml:"secret_key"`
	MaxResourceAge time.Duration `yaml:"max_resource_age"`

	// Need a pointer to a boolean here since we want to be able to distinguish
	// "false" from "omitted"
	ShowMediaByDefault *bool `yaml:"show_media_by_default,omitempty"`

	EmailAddress string `yaml:"email_address"`

	ErrorReporter      string `yaml:"error_reporter,omitempty"`
	ErrorReporterToken string `yaml:"error_reporter_token,omitempty"`

	AuthScheme string `yaml:"auth_scheme"`
	User       string `yaml:"basic_auth_user"`
	Password   string `yaml:"basic_auth_password"`

	GoogleClientID       string   `yaml:"google_client_id"`
	GoogleClientSecret   string   `yaml:"google_client_secret"`
	GoogleAllowedDomains []string `yaml:"google_allowed_domains"`

	PolicyFile string `yaml:"policy_file"`
	Policy     *Policy

	Debug bool `yaml:"debug"`
}

type GoogleAuthenticator struct {
	log.Logger
	AllowUnencryptedTraffic bool
	Conf                    *oauth2.Config
	RenderLogin             func(http.ResponseWriter, *http.Request, string)
	RenderLogout            func(http.ResponseWriter, *http.Request)
	// contains filtered or unexported fields
}

type Group struct {
	Permissions *UserSettings `yaml:"permissions"`
	Name        string        `yaml:"name"`
	Default     bool          `yaml:"default,omitempty"`
	Users       []string      `yaml:"users"`
}

type NoopAuthenticator struct {
	User *User
}

type OAuthAuthenticator interface {
	URL(http.ResponseWriter, *http.Request) string
}

type Permission struct {
	// contains filtered or unexported fields
}

type Policy []*Group

type PolicyPolicy struct {
	Policy *Policy `yaml:"policy"`
}

type Settings struct {
	Logger log.Logger

	// The host the user visits to get to this site.
	PublicHost string

	// Whether to allow HTTP traffic.
	AllowUnencryptedTraffic bool
	Client                  *twilio.Client

	// LocationFinder determines the correct timezone to display for a given
	// request, based on the default and a user's TZ cookie (if present).
	LocationFinder services.LocationFinder

	// How many messages to display per page.
	PageSize uint

	// Used to encrypt next page URI's and sessions. See
	// https://github.com/kevinburke/logrole/blob/master/docs/settings.md#secret-key
	SecretKey *[32]byte

	// Don't show resources that are older than this age. Set to a very high
	// value to show all resources.
	MaxResourceAge time.Duration

	// Should a user have to click a button to view media attached to a MMS?
	ShowMediaByDefault bool

	// Email address for server errors / "contact me" on error pages.
	Mailto *mail.Address

	// Error reporter. This must not be nil; set to NoopErrorReporter to ignore
	// errors.
	Reporter services.ErrorReporter

	// The authentication scheme.
	Authenticator Authenticator

	// THIS IS NOT A SECURITY FEATURE AND SHOULD NOT BE RELIED ON FOR IP
	// WHITELISTING.
	IPSubnets []*net.IPNet
}

type User struct {
	// contains filtered or unexported fields
}

type UserSettings struct {
	// Can the user see whether a message had MMS attached?
	CanViewNumMedia bool `yaml:"can_view_num_media"`
	// Can the user view anything about a SMS/MMS message?
	CanViewMessages bool `yaml:"can_view_messages"`
	// Can the user view the message sender?
	CanViewMessageFrom bool `yaml:"can_view_message_from"`
	// Can the user view the message recipient's phone number?
	CanViewMessageTo bool `yaml:"can_view_message_to"`
	// Can the user view a SMS message body?
	CanViewMessageBody bool `yaml:"can_view_message_body"`
	// Can the user view the photos in a MMS message?
	CanViewMedia bool `yaml:"can_view_media"`

	// Can the user see how much a message cost to send?
	CanViewMessagePrice bool `yaml:"can_view_message_price"`

	// Can the user see any information about a call?
	CanViewCalls bool `yaml:"can_view_calls"`
	// Can the user view the call originator?
	CanViewCallFrom bool `yaml:"can_view_call_from"`
	// Can the user view the call recipient?
	CanViewCallTo    bool `yaml:"can_view_call_to"`
	CanViewCallPrice bool `yaml:"can_view_call_price"`
	// Can the user see whether a call has recordings attached?
	CanViewNumRecordings bool `yaml:"can_view_num_recordings"`
	// Can the user listen to recordings?
	CanPlayRecordings     bool `yaml:"can_play_recordings"`
	CanViewRecordingPrice bool `yaml:"can_view_recording_price"`
	// Can the user view metadata about a conference (sid, date created,
	// region, etc)?
	CanViewConferences bool `yaml:"can_view_conferences"`
	// Can the user view information about errors that occurred while routing
	// a call? e.g. "HTTP retrieval failure" at the callback URL.
	CanViewAlerts bool `yaml:"can_view_alerts"`
	// Can the user view a StatusCallbackURL? Also protects
	// Voice/SMS/Fallback/Callback URL's for phone numbers.
	CanViewCallbackURLs bool `yaml:"can_view_callback_urls"`

	// The maximum viewable age of resources this user can view. If nonzero,
	// this overrides any global setting.
	//
	// Note phone numbers are *exempt* from this rule. All of your account's phone
	// numbers will be viewable even if the phone number was purchased before this
	// age.
	MaxResourceAge time.Duration `yaml:"max_resource_age"`
}