server

type AuthService struct {
	api.UnimplementedAuthServiceServer
	// contains filtered or unexported fields
}

type ChallengeManager struct {
	// contains filtered or unexported fields
}

type Config struct {
	Version              *version.Version     `toml:"version,omitempty" comment:"The configuration version (DO NOT CHANGE)"`
	InternalServerConfig InternalServerConfig `toml:"internal_server" comment:"Internal server configuration"`
	Log                  LogConfig            `toml:"log" comment:"Logging configuration"`
	OAuthClient          OAuthClientConfig    `toml:"oauth_client" comment:"OAuth client configuration"`
	OAuthServer          OAuthServerConfig    `toml:"oauth_server" comment:"OAuth callback server configuration"`
}

type InternalServerConfig struct {
	Address             string `toml:"address" comment:"The address to listen on for the internal server" default:"127.0.0.1"`
	Port                uint16 `toml:"port" comment:"The port to listen on for the internal server" default:"8081"`
	ClientAllowListPath string `` /* 133-byte string literal not displayed */
	RootTlsCertPath     string `toml:"root_cert" comment:"The path to the root TLS certificate file (for client verification)" default:"./internal-root.crt"`
	RootTlsKeyPath      string `toml:"root_key" comment:"The path to the root TLS key file" default:"./internal-root.key"`
	ServerTlsCertPath   string `toml:"server_cert" comment:"The path to the server TLS certificate file" default:"./internal-server.crt"`
	ServerTlsKeyPath    string `toml:"server_key" comment:"The path to the server TLS key file" default:"./internal-server.key"`
	Callback            string `` /* 196-byte string literal not displayed */
	Timeout             int    `toml:"timeout" comment:"The challenge timeout (in seconds)" default:"300"`

	// The client certificate allow list
	ClientAllowList certificateAllowList `toml:"-"`

	// The root TLS keypair
	RootTlsCert *tls.Certificate `toml:"-"`

	// The interal server TLS kepair
	ServerTlsKeypair *tls.Certificate `toml:"-"`
}

type LogConfig struct {
	File   string           `toml:"file" comment:"Log file (if output is file)" default:"/var/log/pam-oauth-server.log"`
	Level  common.LogLevel  `toml:"level" comment:"Log level (One of debug, info, warn, or error)" default:"info"`
	Output common.LogOutput `toml:"output" comment:"Log output (One of file, stdout, or stderr)" default:"stderr"`
}

type OAuthClientConfig struct {
	ClientID     string   `toml:"client_id" comment:"The OAuth client ID"`
	ClientSecret string   `toml:"client_secret" comment:"The OAuth client secret"`
	Scopes       []string `toml:"scopes" comment:"The OAuth scopes (openid scope is required if oidc_url is set)" default:"[openid,profile,email]"`
	OidcUrl      string   `` /* 156-byte string literal not displayed */
	AuthURL      string   `toml:"auth_url" comment:"The OAuth endpoint auth URL (Mutually exclusive with oidc_url)"`
	TokenURL     string   `toml:"token_url" comment:"The OAuth endpoint token URL (Mutually exclusive with oidc_url)"`
}

type OAuthServerConfig struct {
	Address           string `toml:"address" comment:"The address to listen on for the OAuth callback server" default:"0.0.0.0"`
	Port              uint16 `toml:"port" comment:"The port to listen on for the OAuth callback server" default:"8080"`
	ServerTlsAuto     bool   `toml:"tls_auto" comment:"Automatically enable TLS via LetsEncrypt" default:"false"`
	ServerTlsAutoPath string `toml:"tls_auto_path" comment:"The path to the automatic TLS cache directory" default:"./letsencrypt"`
	ServerTlsCertPath string `toml:"tls_cert" comment:"The path to the server TLS certificate file"`
	ServerTlsKeyPath  string `toml:"tls_key" comment:"The path to the server TLS key file"`
	ExternalBaseUrl   string `toml:"external_base_url" comment:"The external base URL for the OAuth callback server" default:"http://localhost:8080"`

	// The TLS certificate and key
	ServerTlsKeypair *tls.Certificate `toml:"-"`
}