skycmd

type AuthFlags struct {
	SecureCookies bool              `long:"cookie-secure" description:"Force sending secure flag on http cookies"`
	Expiration    time.Duration     `` /* 135-byte string literal not displayed */
	SigningKey    *flag.PrivateKey  `long:"session-signing-key" required:"true" description:"File containing an RSA private key, used to sign auth tokens."`
	LocalUsers    map[string]string `` /* 204-byte string literal not displayed */
	Clients       map[string]string `long:"add-client" description:"List of client_id:client_secret combinations" value-name:"CLIENT_ID:CLIENT_SECRET"`
}

type AuthTeamFlags struct {
	LocalUsers []string  `` /* 169-byte string literal not displayed */
	Config     flag.File `short:"c" long:"config" description:"Configuration file for specifying team params"`
}

type BitbucketCloudFlags struct {
	ClientID     string `long:"client-id" description:"(Required) Client id"`
	ClientSecret string `long:"client-secret" description:"(Required) Client secret"`
}

type BitbucketCloudTeamFlags struct {
	Users []string `long:"user" description:"A whitelisted Bitbucket Cloud user" value-name:"USERNAME"`
	Teams []string `long:"team" description:"A whitelisted Bitbucket Cloud team" value-name:"TEAM_NAME"`
}

type CFFlags struct {
	ClientID           string      `long:"client-id" description:"(Required) Client id"`
	ClientSecret       string      `long:"client-secret" description:"(Required) Client secret"`
	APIURL             string      `` /* 167-byte string literal not displayed */
	CACerts            []flag.File `long:"ca-cert" description:"CA Certificate"`
	InsecureSkipVerify bool        `long:"skip-ssl-validation" description:"Skip SSL validation"`
}

type CFTeamFlags struct {
	Users            []string `long:"user" description:"A whitelisted CloudFoundry user" value-name:"USERNAME"`
	Orgs             []string `long:"org" description:"A whitelisted CloudFoundry org" value-name:"ORG_NAME"`
	Spaces           []string `` /* 141-byte string literal not displayed */
	SpacesAll        []string `` /* 166-byte string literal not displayed */
	SpacesDeveloper  []string `` /* 190-byte string literal not displayed */
	SpacesAuditor    []string `` /* 184-byte string literal not displayed */
	SpacesManager    []string `` /* 184-byte string literal not displayed */
	SpaceGuids       []string `long:"space-guid" description:"A whitelisted CloudFoundry space guid" value-name:"SPACE_GUID" mapstructure:"space_guids"`
	SpaceGuidsLegacy []string `mapstructure:"spaceguids"`
}

type Config interface {
	Name() string
	Serialize(redirectURI string) ([]byte, error)
}

type Connector struct {
	// contains filtered or unexported fields
}

type GithubFlags struct {
	ClientID     string    `long:"client-id" description:"(Required) Client id"`
	ClientSecret string    `long:"client-secret" description:"(Required) Client secret"`
	Host         string    `long:"host" description:"Hostname of GitHub Enterprise deployment (No scheme, No trailing slash)"`
	CACert       flag.File `long:"ca-cert" description:"CA certificate of GitHub Enterprise deployment"`
}

type GithubTeamFlags struct {
	Users []string `long:"user" description:"A whitelisted GitHub user" value-name:"USERNAME"`
	Orgs  []string `long:"org" description:"A whitelisted GitHub org" value-name:"ORG_NAME"`
	Teams []string `long:"team" description:"A whitelisted GitHub team" value-name:"ORG_NAME:TEAM_NAME"`
}

type GitlabFlags struct {
	ClientID     string `long:"client-id" description:"(Required) Client id"`
	ClientSecret string `long:"client-secret" description:"(Required) Client secret"`
	Host         string `long:"host" description:"Hostname of Gitlab Enterprise deployment (Include scheme, No trailing slash)"`
}

type GitlabTeamFlags struct {
	Users  []string `long:"user" description:"A whitelisted GitLab user" value-name:"USERNAME"`
	Groups []string `long:"group" description:"A whitelisted GitLab group" value-name:"GROUP_NAME"`
}

type LDAPFlags struct {
	DisplayName        string    `long:"display-name" description:"The auth provider name displayed to users on the login page"`
	Host               string    `` /* 170-byte string literal not displayed */
	BindDN             string    `long:"bind-dn" description:"(Required) Bind DN for searching LDAP users and groups. Typically this is a read-only user."`
	BindPW             string    `long:"bind-pw" description:"(Required) Bind Password for the user specified by 'bind-dn'"`
	InsecureNoSSL      bool      `long:"insecure-no-ssl" description:"Required if LDAP host does not use TLS."`
	InsecureSkipVerify bool      `long:"insecure-skip-verify" description:"Skip certificate verification"`
	StartTLS           bool      `long:"start-tls" description:"Start on insecure port, then negotiate TLS"`
	CACert             flag.File `long:"ca-cert" description:"CA certificate"`

	UserSearch struct {
		BaseDN    string `long:"user-search-base-dn" description:"BaseDN to start the search from. For example 'cn=users,dc=example,dc=com'"`
		Filter    string `` /* 129-byte string literal not displayed */
		Username  string `` /* 176-byte string literal not displayed */
		Scope     string `` /* 140-byte string literal not displayed */
		IDAttr    string `long:"user-search-id-attr" description:"A mapping of attributes on the user entry to claims. Defaults to 'uid'."`
		EmailAttr string `long:"user-search-email-attr" description:"A mapping of attributes on the user entry to claims. Defaults to 'mail'."`
		NameAttr  string `long:"user-search-name-attr" description:"A mapping of attributes on the user entry to claims."`
	}

	GroupSearch struct {
		BaseDN    string `long:"group-search-base-dn" description:"BaseDN to start the search from. For example 'cn=groups,dc=example,dc=com'"`
		Filter    string `` /* 134-byte string literal not displayed */
		Scope     string `` /* 141-byte string literal not displayed */
		UserAttr  string `` /* 217-byte string literal not displayed */
		GroupAttr string `` /* 218-byte string literal not displayed */
		NameAttr  string `long:"group-search-name-attr" description:"The attribute of the group that represents its name."`
	}
}

type LDAPTeamFlags struct {
	Users  []string `json:"users" long:"user" description:"A whitelisted LDAP user" value-name:"USERNAME"`
	Groups []string `json:"groups" long:"group" description:"A whitelisted LDAP group" value-name:"GROUP_NAME"`
}

type MicrosoftFlags struct {
	ClientID           string   `long:"client-id" description:"(Required) Client id"`
	ClientSecret       string   `long:"client-secret" description:"(Required) Client secret"`
	Tenant             string   `long:"tenant" description:"Microsoft Tenant limitation (common, consumers, organizations, tenant name or tenant uuid)"`
	Groups             []string `long:"groups" description:"Allowed Active Directory Groups"`
	OnlySecurityGroups bool     `long:"only-security-groups" description:"Only fetch security groups"`
}

type MicrosoftTeamFlags struct {
	Users  []string `long:"user" description:"A whitelisted Microsoft user" value-name:"USERNAME"`
	Groups []string `long:"group" description:"A whitelisted Microsoft group" value-name:"GROUP_NAME"`
}

type OAuthFlags struct {
	DisplayName        string      `long:"display-name" description:"The auth provider name displayed to users on the login page"`
	ClientID           string      `long:"client-id" description:"(Required) Client id"`
	ClientSecret       string      `long:"client-secret" description:"(Required) Client secret"`
	AuthURL            string      `long:"auth-url" description:"(Required) Authorization URL"`
	TokenURL           string      `long:"token-url" description:"(Required) Token URL"`
	UserInfoURL        string      `long:"userinfo-url" description:"(Required) UserInfo URL"`
	Scopes             []string    `long:"scope" description:"Any additional scopes that need to be requested during authorization"`
	GroupsKey          string      `` /* 135-byte string literal not displayed */
	UserIDKey          string      `` /* 146-byte string literal not displayed */
	UserNameKey        string      `` /* 156-byte string literal not displayed */
	CACerts            []flag.File `long:"ca-cert" description:"CA Certificate"`
	InsecureSkipVerify bool        `long:"skip-ssl-validation" description:"Skip SSL validation"`
}

type OAuthTeamFlags struct {
	Users  []string `json:"users" long:"user" description:"A whitelisted OAuth2 user" value-name:"USERNAME"`
	Groups []string `json:"groups" long:"group" description:"A whitelisted OAuth2 group" value-name:"GROUP_NAME"`
}

type OIDCFlags struct {
	DisplayName        string      `long:"display-name" description:"The auth provider name displayed to users on the login page"`
	Issuer             string      `` /* 153-byte string literal not displayed */
	ClientID           string      `long:"client-id" description:"(Required) Client id"`
	ClientSecret       string      `long:"client-secret" description:"(Required) Client secret"`
	Scopes             []string    `long:"scope" description:"Any additional scopes that need to be requested during authorization"`
	GroupsKey          string      `` /* 135-byte string literal not displayed */
	UserNameKey        string      `` /* 155-byte string literal not displayed */
	HostedDomains      []string    `` /* 140-byte string literal not displayed */
	CACerts            []flag.File `long:"ca-cert" description:"CA Certificate"`
	InsecureSkipVerify bool        `long:"skip-ssl-validation" description:"Skip SSL validation"`
}

type OIDCTeamFlags struct {
	Users  []string `json:"users" long:"user" description:"A whitelisted OIDC user" value-name:"USERNAME"`
	Groups []string `json:"groups" long:"group" description:"A whitelisted OIDC group" value-name:"GROUP_NAME"`
}

type TeamConfig interface {
	GetUsers() []string
	GetGroups() []string
}