authn

type BckACL struct {
	Bck    cmn.Bck         `json:"bck"`
	Access apc.AccessAttrs `json:"perm,string"`
}

type CluACL struct {
	ID     string          `json:"id"`
	Alias  string          `json:"alias,omitempty"`
	Access apc.AccessAttrs `json:"perm,string,omitempty"`
	URLs   []string        `json:"urls,omitempty"`
}

type Config struct {
	sync.RWMutex `list:"omit"` // for cmn.IterFields
	Log          LogConf       `json:"log"`
	Net          NetConf       `json:"net"`
	Server       ServerConf    `json:"auth"`
	Timeout      TimeoutConf   `json:"timeout"`
}

type ConfigToUpdate struct {
	Server *ServerConfToSet `json:"auth"`
}

type HTTPConf struct {
	Port        int    `json:"port"`
	UseHTTPS    bool   `json:"use_https"`
	Certificate string `json:"server_crt"`
	Key         string `json:"server_key"`
}

type LogConf struct {
	Dir   string `json:"dir"`
	Level string `json:"level"`
}

type LoginMsg struct {
	Password  string         `json:"password"`
	ExpiresIn *time.Duration `json:"expires_in"`
	ClusterID string         `json:"cluster_id"`
}

type NetConf struct {
	HTTP HTTPConf `json:"http"`
}

type RegisteredClusters struct {
	M map[string]*CluACL `json:"clusters,omitempty"`
}

type Role struct {
	ID          string    `json:"name"`
	Desc        string    `json:"desc"`
	Roles       []string  `json:"roles"`
	ClusterACLs []*CluACL `json:"clusters"`
	BucketACLs  []*BckACL `json:"buckets"`
	IsAdmin     bool      `json:"admin"`
}

type ServerConf struct {
	Secret       string       `json:"secret"`
	ExpirePeriod cos.Duration `json:"expiration_time"`
}

type ServerConfToSet struct {
	Secret       *string `json:"secret"`
	ExpirePeriod *string `json:"expiration_time"`
}

type TimeoutConf struct {
	Default cos.Duration `json:"default_timeout"`
}

type TokenList struct {
	Tokens  []string `json:"tokens"`
	Version int64    `json:"version,string"`
}

type TokenMsg struct {
	Token string `json:"token"`
}

type User struct {
	ID          string    `json:"id"`
	Password    string    `json:"pass,omitempty"`
	Roles       []string  `json:"roles"`
	ClusterACLs []*CluACL `json:"clusters"`
	BucketACLs  []*BckACL `json:"buckets"` // list of buckets with special permissions
}