internal

type Identifier interface {
	IdentifyRequest(*http.Request) (*string, error)
}

type IdentifierConfig struct {
	JwtBearerHeader *IdentifierConfigJwtBearerHeader   `yaml:"jwtBearerHeader"`
	JwtQueryToken   *IdentifierConfigJwtQueryParameter `yaml:"jwtQueryParameter"`
}

type IdentifierConfigJwtBearerHeader struct {
	Algorithm string `yaml:"algorithm"`
	KeyID     string `yaml:"keyId"`
	Verifier  string `yaml:"verifier"`
	Claim     string `yaml:"claim"`
}

type IdentifierConfigJwtQueryParameter struct {
	Algorithm string `yaml:"algorithm"`
	KeyID     string `yaml:"keyId"`
	Verifier  string `yaml:"verifier"`
	Claim     string `yaml:"claim"`
	Name      string `yaml:"name"`
}

type JwtIdentifier struct {
	KeyID             string
	Algorithm         string
	Verifier          string
	TokenExtractor    func(http.Request) (*string, error)
	IdentityExtractor func(claims jwt.MapClaims) (*string, error)
}

type RateLimitProxy struct {
	Config         RateLimitProxyConfig
	RedisClient    redis.Client
	Identifiers    []Identifier
	InnerServeHTTP func(http.ResponseWriter, *http.Request)
}

type RateLimitProxyConfig struct {
	Redis             RateLimitProxyConfigRedis  `yaml:"redis"`
	Paths             RateLimitProxyConfigPaths  `yaml:"paths"`
	Limits            RateLimitProxyConfigLimits `yaml:"limits"`
	IdentifiersConfig []IdentifierConfig         `yaml:"identifiers"`
}

type RateLimitProxyConfigLimits struct {
	Interval   int64            `yaml:"interval"`
	Anonymous  int64            `yaml:"anonymous"`
	Identified int64            `yaml:"identified"`
	Other      map[string]int64 `yaml:"other"`
}

type RateLimitProxyConfigPaths struct {
	Includes []string `yaml:"includes"`
	Excludes []string `yaml:"excludes"`
}

type RateLimitProxyConfigRedis struct {
	Address   string `yaml:"address"`
	Password  string `yaml:"password"`
	TLS       bool   `yaml:"tls"`
	KeyPrefix string `yaml:"keyPrefix"`
}