client

type AdminProfile struct {
	Endpoint  string            `yaml:"endpoint"`             // the Admin URL to connect to the Admin API, also $TRISA_DIRECTORY_ADMIN_URL
	Audience  string            `yaml:"audience,omitempty"`   // the Audience for local token generation auth, usually $GDS_ADMIN_AUDIENCE
	TokenKeys map[string]string `yaml:"token_keys,omitempty"` // the token keys identifier and paths for local token generation auth, usually $GDS_ADMIN_TOKEN_KEYS
}

type CredentialCache struct {
	Version     string                  `json:"version"`
	Credentials map[string]*Credentials `json:"credentials"`
}

type Credentials struct {
	AccessToken  string `json:"access_token"`
	RefreshToken string `json:"refresh_token"`
}

type DirectoryProfile struct {
	Endpoint string `yaml:"endpoint"`           // the GDS endpoint to connect to the gRPC directory service, also $TRISA_DIRECTORY_URL
	Insecure bool   `yaml:"insecure,omitempty"` // do not connect to the directory endpoint with TLS
}

type MembersProfile struct {
	Endpoint string `yaml:"endpoint"`            // the members endpoint to connect to the anti-entropy service
	Insecure bool   `yaml:"insecure,omitempty"`  // do not connect to the members endpoint with mTLS
	CertPath string `yaml:"cert_path,omitempty"` // path to client certificates for mTLS
	PoolPath string `yaml:"pool_path,omitempty"` // path to client trusted certpool for mTLS
}

type Profile struct {
	Directory    *DirectoryProfile `yaml:"directory"`              // directory configuration
	Admin        *AdminProfile     `yaml:"admin"`                  // admin api configuration
	TrtlProfiles []*TrtlProfile    `yaml:"trtl"`                   // replica configurations
	Members      *MembersProfile   `yaml:"members"`                // members configuration
	DatabaseURL  string            `yaml:"database_url,omitempty"` // localhost only: the dsn to the leveldb database, usually $GDS_DATABASE_URL
	Timeout      time.Duration     `yaml:"timeout,omitempty"`      // default timeout to create contexts for API connections, if not specified defaults to 30 seconds
}

type Profiles struct {
	Version  string              `yaml:"version"`
	Active   string              `yaml:"active"`
	Profiles map[string]*Profile `yaml:"profiles"`
}

type TrtlProfile struct {
	Endpoint string `yaml:"endpoint"`            // the replica endpoint to connect to the anti-entropy service
	Insecure bool   `yaml:"insecure,omitempty"`  // do not connect to the replica endpoint with TLS
	CertPath string `yaml:"cert_path,omitempty"` // the path to the client key-pair for client-side mTLS
	PoolPath string `yaml:"pool_path,omitempty"` // the path to the trust chain for client-side mTLS
}