tokens

type AgencyTokenBody struct {
	AssumedBy    *AssumeBy      `json:"assumed_by",omitempty`
	CatalogEntry []CatalogEntry `json:"catalog"`
	Domain       *Domain        `json:"domain",omitempty`
	ExpiresAt    time.Time      `json:"expires_at"`
	IssuedAt     time.Time      `json:"issued_at"`
	Methods      []string       `json:"methods"`
	Project      *Project       `json:"project",omitempty`
	Roles        []Role         `json:"roles"`
	User         *User          `json:"user",omitempty`
}

type AgencyTokenOptions struct {
	Auth AuthReq `json:"auth,omitempty"`
}

type AssumeBy struct {
	User User `json:"user"`
}

type AssumeRoleReq struct {
	DomainID   string `json:"domain_id,omitempty"`
	DomainName string `json:"domain_name,omitempty"`
	XroleName  string `json:"xrole_name,omitempty"`
}

type AuthOptionAgencytBuilder interface {
	ToTokenV3AgencyCreateMap() (map[string]interface{}, error)
}

type AuthOptionPwdtBuilder interface {
	ToTokenV3PwdCreateMap() (map[string]interface{}, error)
}

type AuthOptionsBuilder interface {
	// ToTokenV3CreateMap assembles the Create request body, returning an error
	// if parameters are missing or inconsistent.
	ToTokenV3CreateMap(map[string]interface{}) (map[string]interface{}, error)
	ToTokenV3ScopeMap() (map[string]interface{}, error)
	CanReauth() bool
}

type AuthReq struct {
	Identity *IdentityReq `json:"identity,omitempty"`
	Scope    *ScopeReq    `json:"scope,omitempty"`
}

type CatalogEntry struct {
	// Service ID
	ID string `json:"id"`

	// Name will contain the provider-specified name for the service.
	Name string `json:"name"`

	// Type will contain a type string if OpenStack defines a type for the
	// service. Otherwise, for provider-specific services, the provider may
	// assign their own type strings.
	Type string `json:"type"`

	// Endpoints will let the caller iterate over all the different endpoints that
	// may exist for the service.
	Endpoints []Endpoint `json:"endpoints"`
}

type CreateResult struct {
	// contains filtered or unexported fields
}

type Domain struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type DomainReq struct {
	ID   string `json:"id,omitempty"`
	Name string `json:"name,omitempty"`
}

type Endpoint struct {
	ID        string `json:"id"`
	Region    string `json:"region"`
	Interface string `json:"interface"`
	URL       string `json:"url"`
	RegionId  string `json:"region_id"`
}

type GetResult struct {
	// contains filtered or unexported fields
}

type IdentityReq struct {
	Methods    []string       `json:"methods,omitempty"`
	Password   *PasswordReq   `json:"password,omitempty"`
	Totp       *TotpReq       `json:"totp,omitempty"`
	AssumeRole *AssumeRoleReq `json:"assume_role",omitempty`
}

type PasswordReq struct {
	User UserReq `json:"user,omitempty"`
}

type Project struct {
	Domain Domain `json:"domain"`
	ID     string `json:"id"`
	Name   string `json:"name"`
}

type ProjectReq struct {
	ID   string `json:"id,omitempty"`
	Name string `json:"name,omitempty"`
}

type PwdTokenOptions struct {
	Auth *AuthReq `json:"auth,omitempty"`
}

type RevokeResult struct {
	// contains filtered or unexported fields
}

type Role struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type Scope struct {
	ProjectID   string
	ProjectName string
	DomainID    string
	DomainName  string
}

type ScopeReq struct {
	Domain  *DomainReq  `json:"domain,omitempty"`
	Project *ProjectReq `json:"project,omitempty"`
}

type ServiceCatalog struct {
	Entries []CatalogEntry `json:"catalog"`
}

type Token struct {
	// ID is the issued token.
	ID string `json:"id"`

	// ExpiresAt is the timestamp at which this token will no longer be accepted.
	ExpiresAt time.Time `json:"expires_at"`
}

type TokenBody struct {
	CatalogEntry []CatalogEntry `json:"catalog"`
	Domain       *Domain        `json:"domain",omitempty`
	ExpiresAt    time.Time      `json:"expires_at"`
	IssuedAt     time.Time      `json:"issued_at"`
	Methods      []string       `json:"methods"`
	Project      *Project       `json:"project",omitempty`
	Roles        []Role         `json:"roles"`
	User         *User          `json:"user",omitempty`
}

type TokenOptions struct {
	// IdentityEndpoint specifies the HTTP endpoint that is required to work with
	// the Identity API of the appropriate version. While it's ultimately needed
	// by all of the identity services, it will often be populated by a
	// provider-level function.
	IdentityEndpoint string `json:"-"`

	// Username is required if using Identity V2 API. Consult with your provider's
	// control panel to discover your account's username. In Identity V3, either
	// UserID or a combination of Username and DomainID or DomainName are needed.
	Username string `json:"username,omitempty"`
	UserID   string `json:"id,omitempty"`

	Password string `json:"password,omitempty"`

	// At most one of DomainID and DomainName must be provided if using Username
	// with Identity V3. Otherwise, either are optional.
	DomainID   string `json:"-"`
	DomainName string `json:"name,omitempty"`

	// AllowReauth should be set to true if you grant permission for Gophercloud
	// to cache your credentials in memory, and to allow Gophercloud to attempt
	// to re-authenticate automatically if/when your token expires.  If you set
	// it to false, it will not cache these settings, but re-authentication will
	// not be possible.  This setting defaults to false.
	AllowReauth bool `json:"-"`

	// TokenID allows users to authenticate (possibly as another user) with an
	// authentication token ID.
	TokenID string `json:"-"`

	Scope Scope `json:"-"`
}

type TotpReq struct {
	User UserReq `json:"user,omitempty"`
}

type User struct {
	Domain            Domain `json:"domain"`
	ID                string `json:"id"`
	Name              string `json:"name"`
	PasswordExpiresAt string `json:"password_expires_at"`
}

type UserReq struct {
	ID       string    `json:"id,omitempty"`
	Name     string    `json:"name,omitempty"`
	Password string    `json:"password"`
	Domain   DomainReq `json:"domain,omitempty"`
	PassCode string    `json:"passcode"`
}