workflow

type Client struct {
	BaseURL         *url.URL
	HttpClient      *http.Client
	PolicyEncrypter string // TODO: key, signingmethod etc
	Debug           int
}

type CreateRequest struct {
	IdpNonce  string    `json:"idp_nonce"`
	Requester Requester `json:"requester"`
	Source    Source    `json:"source"`
	Target    Target    `json:"target"`
	// To be encrypted with workflow public key
	// TODO: change type here, separation of concerns...
	Policy Policy `json:"policy"`
}

type CreateResponse struct {
	WorkflowId    string `json:"workflow_id"`
	WorkflowUrl   string `json:"workflow_url"`
	WorkflowNonce string `json:"workflow_nonce"`
}

type GetAssertionsRequest struct {
	WorkflowId    string `json:"workflow_id"`
	WorkflowNonce string `json:"workflow_nonce"`
}

type GetAssertionsResponse struct {
	// Bag of SAML assertions. Could be wrapped(?)
	//Workflow Workflow `json:"workflow"` //???
	Status     string   `json:"status"`     //???
	Assertions []string `json:"assertions"` // Resulting IDP assertions
}

type GetDetailsRequest struct {
}

type GetDetailsResponse struct {
}

type Policy struct {
	Name                string         `json:"name"`
	IdpName             string         `json:"idp_name"`
	RequesterCanApprove bool           `json:"requester_can_approve"`
	IdentifyRoles       map[string]int `json:"identify_roles"`
	ApproverRoles       map[string]int `json:"approver_roles"`
}

type Requester struct {
	Name     string `json:"name"`
	Username string `json:"username"`
	Email    string `json:"email"`
}

type Source struct {
	// Source Key? For gitlab?
	Description string `json:"description"`
	DetailsURI  string `json:"details_uri"`
}

type Target struct {
	EnvironmentName         string `json:"environment_name"`
	EnvironmentDiscoveryURI string `json:"environment_discovery_uri"`
}