v1alpha1

type API struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   APISpec   `json:"spec,omitempty"`
	Status APIStatus `json:"status,omitempty"`
}

type APIAuth struct {
	// Oauth2 is to specify the Oauth2 authentication scheme details
	//
	// +optional
	Oauth2 Oauth2Auth `json:"oauth2,omitempty"`

	// APIKey is to specify the APIKey authentication scheme details
	//
	// +optional
	// +nullable
	APIKey []APIKeyAuth `json:"apiKey,omitempty"`

	// TestConsoleKey is to specify the Test Console Key authentication scheme details
	//
	// +optional
	TestConsoleKey TestConsoleKeyAuth `json:"testConsoleKey,omitempty"`
}

type APIKeyAuth struct {
	//	In is to specify how the APIKey is passed to the request
	//
	// +kubebuilder:validation:Enum=Header;Query
	// +kubebuilder:validation:MinLength=1
	In string `json:"in,omitempty"`

	// Name is the name of the header or query parameter to be used
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name,omitempty"`

	// SendTokenToUpstream is to specify whether the APIKey should be sent to the upstream
	//
	// +optional
	SendTokenToUpstream bool `json:"sendTokenToUpstream,omitempty"`
}

type APIList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []API `json:"items"`
}

type APIPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   APIPolicySpec   `json:"spec,omitempty"`
	Status APIPolicyStatus `json:"status,omitempty"`
}

type APIPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []APIPolicy `json:"items"`
}

type APIPolicySpec struct {
	Default   *PolicySpec                     `json:"default,omitempty"`
	Override  *PolicySpec                     `json:"override,omitempty"`
	TargetRef gwapiv1b1.PolicyTargetReference `json:"targetRef,omitempty"`
}

type APIPolicyStatus struct {
}

type APIRateLimitPolicy struct {
	// RequestPerUnit is the number of requests allowed per unit time
	//
	// +kubeBuilder:validation:Minimum=1
	RequestsPerUnit uint32 `json:"requestsPerUnit,omitempty"`

	// Unit is the unit of the requestsPerUnit
	//
	// +kubebuilder:validation:Enum=Minute;Hour;Day
	Unit string `json:"unit,omitempty"`
}

type APISpec struct {

	// APIName is the unique name of the API
	//can be used to uniquely identify an API.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=60
	// +kubebuilder:validation:Pattern="^[^~!@#;:%^*()+={}|\\<>\"”,&$\\[\\]\\/]*$"
	APIName string `json:"apiName"`

	// APIVersion is the version number of the API.
	//
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=30
	// +kubebuilder:validation:Pattern="^[^~!@#;:%^*()+={}|\\<>\"”,&/$\\[\\]\\s+\\/]+$"
	APIVersion string `json:"apiVersion"`

	// IsDefaultVersion indicates whether this API version should be used as a default API
	//
	// +optional
	IsDefaultVersion bool `json:"isDefaultVersion"`

	// DefinitionFileRef contains the OpenAPI 3 or Swagger
	// definition of the API in a ConfigMap.
	//
	// +optional
	DefinitionFileRef string `json:"definitionFileRef"`

	// DefinitionPath contains the path to expose the API definition.
	//
	// +kubebuilder:default:=/api-definition
	// +kubebuilder:validation:MinLength=1
	DefinitionPath string `json:"definitionPath"`

	// Production contains a list of references to HttpRoutes
	// of type HttpRoute.
	// xref: https://github.com/kubernetes-sigs/gateway-api/blob/main/apis/v1beta1/httproute_types.go
	//
	//
	// +optional
	// +nullable
	// +kubebuilder:validation:MaxItems=1
	Production []EnvConfig `json:"production"`

	// Sandbox contains a list of references to HttpRoutes
	// of type HttpRoute.
	// xref: https://github.com/kubernetes-sigs/gateway-api/blob/main/apis/v1beta1/httproute_types.go
	//
	//
	// +optional
	// +nullable
	// +kubebuilder:validation:MaxItems=1
	Sandbox []EnvConfig `json:"sandbox"`

	// APIType denotes the type of the API.
	// Possible values could be REST, GraphQL, Async
	//
	// +kubebuilder:validation:Enum=REST
	APIType string `json:"apiType"`

	// BasePath denotes the basepath of the API.
	// e.g: /pet-store-api/1.0.6
	//
	// +kubectl:validation:MaxLength=232
	// +kubebuilder:validation:Pattern=^[/][a-zA-Z0-9~/_.-]*$
	BasePath string `json:"basePath"`

	// Organization denotes the organization.
	// related to the API
	//
	// +optional
	Organization string `json:"organization"`

	// SystemAPI denotes if it is an internal system API.
	//
	// +optional
	SystemAPI bool `json:"systemAPI"`

	// APIProperties denotes the custom properties of the API.
	//
	// +optional
	// +nullable
	APIProperties []Property `json:"apiProperties,omitempty"`
}

type APIStatus struct {
	// DeploymentStatus denotes the deployment status of the API
	//
	// +optional
	DeploymentStatus DeploymentStatus `json:"deploymentStatus"`
}

type AuthSpec struct {
	// Disabled is to disable all authentications
	Disabled *bool `json:"disabled,omitempty"`

	// AuthTypes is to specify the authentication scheme types and details
	AuthTypes *APIAuth `json:"authTypes,omitempty"`
}

type Authentication struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   AuthenticationSpec   `json:"spec,omitempty"`
	Status AuthenticationStatus `json:"status,omitempty"`
}

type AuthenticationList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Authentication `json:"items"`
}

type AuthenticationSpec struct {
	Default   *AuthSpec                       `json:"default,omitempty"`
	Override  *AuthSpec                       `json:"override,omitempty"`
	TargetRef gwapiv1b1.PolicyTargetReference `json:"targetRef,omitempty"`
}

type AuthenticationStatus struct {
}

type Backend struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   BackendSpec   `json:"spec,omitempty"`
	Status BackendStatus `json:"status,omitempty"`
}

type BackendJWT struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   BackendJWTSpec   `json:"spec,omitempty"`
	Status BackendJWTStatus `json:"status,omitempty"`
}

type BackendJWTList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []BackendJWT `json:"items"`
}

type BackendJWTSpec struct {
	// Encoding of the JWT token
	//
	// +optional
	// +kubebuilder:default=Base64
	// +kubebuilder:validation:Enum=Base64;Base64url
	Encoding string `json:"encoding,omitempty"`

	// Header of the JWT token
	//
	// +optional
	// +kubebuilder:default=X-JWT-Assertion
	// +kubebuilder:validation:MinLength=1
	Header string `json:"header,omitempty"`

	// Signing algorithm of the JWT token
	//
	// +optional
	// +kubebuilder:default=SHA256withRSA
	// +kubeBuilder:validation:Enum=SHA256withRSA;SHA384withRSA;SHA512withRSA;SHA256withECDSA;SHA384withECDSA;SHA512withECDSA;SHA256withHMAC;SHA384withHMAC;SHA512withHMAC
	SigningAlgorithm string `json:"signingAlgorithm,omitempty"`

	// TokenTTL time to live for the backend JWT token in seconds
	//
	// +optional
	// +kubebuilder:default=3600
	TokenTTL uint32 `json:"tokenTTL,omitempty"`

	// CustomClaims holds custom claims that needs to be added to the jwt
	//
	// +optional
	// +nullable
	CustomClaims []CustomClaim `json:"customClaims,omitempty"`
}

type BackendJWTStatus struct {
}

type BackendJWTToken struct {
	// Name holds the name of the BackendJWT resource.
	Name string `json:"name,omitempty"`
}

type BackendList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Backend `json:"items"`
}

type BackendProtocolType string

type BackendReference struct {
	// Name is the name of the Backend resource.
	//
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`
}

type BackendSpec struct {
	// Services holds hosts and ports
	//
	// +kubebuilder:validation:MinItems=1
	// +kubebuilder:validation:MaxItems=1
	Services []Service `json:"services,omitempty"`

	// Protocol defines the backend protocol
	//
	// +optional
	// +kubebuilder:validation:Enum=http;https;ws;wss
	// +kubebuilder:default=http
	Protocol BackendProtocolType `json:"protocol"`

	// BasePath defines the base path of the backend
	// +optional
	BasePath string `json:"basePath"`

	// TLS defines the TLS configurations of the backend
	TLS *TLSConfig `json:"tls,omitempty"`

	// Security defines the security configurations of the backend
	Security *SecurityConfig `json:"security,omitempty"`

	// CircuitBreaker defines the circuit breaker configurations
	CircuitBreaker *CircuitBreaker `json:"circuitBreaker,omitempty"`

	// Timeout configuration for the backend
	Timeout *Timeout `json:"timeout,omitempty"`

	// Retry configuration for the backend
	Retry *RetryConfig `json:"retry,omitempty"`

	// HealthCheck configuration for the backend tcp health check
	HealthCheck *HealthCheck `json:"healthCheck,omitempty"`
}

type BackendStatus struct{}

type BasicSecurityConfig struct {
	// SecretRef to credentials
	SecretRef SecretRef `json:"secretRef"`
}

type CERTConfig struct {
	// CertificateInline is the Inline Certificate entry
	CertificateInline *string `json:"certificateInline,omitempty"`
	// SecretRef denotes the reference to the Secret that contains the Certificate
	SecretRef *RefConfig `json:"secretRef,omitempty"`
	// ConfigMapRef denotes the reference to the ConfigMap that contains the Certificate
	ConfigMapRef *RefConfig `json:"configMapRef,omitempty"`
}

type CORSPolicy struct {
	// AllowCredentials indicates whether the request can include user credentials like
	// cookies, HTTP authentication or client side SSL certificates.
	//
	// +optional
	AccessControlAllowCredentials bool `json:"accessControlAllowCredentials,omitempty"`

	// AccessControlAllowHeaders indicates which headers can be used
	// during the actual request.
	//
	// +optional
	AccessControlAllowHeaders []string `json:"accessControlAllowHeaders,omitempty"`

	// AccessControlAllowMethods indicates which methods can be used
	// during the actual request.
	//
	// +optional
	AccessControlAllowMethods []string `json:"accessControlAllowMethods,omitempty"`

	// AccessControlAllowOrigins indicates which origins can be used
	// during the actual request.
	//
	// +optional
	AccessControlAllowOrigins []string `json:"accessControlAllowOrigins,omitempty"`

	// AccessControlExposeHeaders indicates which headers can be exposed
	// as part of the response by listing their names.
	//
	// +optional
	AccessControlExposeHeaders []string `json:"accessControlExposeHeaders,omitempty"`

	// AccessControlMaxAge indicates how long the results of a preflight request
	// can be cached in a preflight result cache.
	//
	// +optional
	AccessControlMaxAge *int `json:"accessControlMaxAge,omitempty"`
}

type CircuitBreaker struct {

	// MaxConnections is the maximum number of connections that will make to the upstream cluster.
	//
	// +kubebuilder:default=1024
	// +optional
	MaxConnections uint32 `json:"maxConnections"`

	// MaxPendingRequests is the maximum number of pending requests that will allow to the upstream cluster.
	//
	// +kubebuilder:default=1024
	// +optional
	MaxPendingRequests uint32 `json:"maxPendingRequests"`

	// MaxRequests is the maximum number of parallel requests that will make to the upstream cluster.
	//
	// +kubebuilder:default=1024
	// +optional
	MaxRequests uint32 `json:"maxRequests"`

	// MaxRetries is the maximum number of parallel retries that will allow to the upstream cluster.
	//
	// +kubebuilder:default=3
	// +optional
	MaxRetries uint32 `json:"maxRetries"`

	// MaxConnectionPools is the maximum number of parallel connection pools that will allow to the upstream cluster.
	// If not specified, the default is unlimited.
	//
	// +optional
	// +kubebuilder:validation:Minimum=1
	MaxConnectionPools uint32 `json:"maxConnectionPools"`
}

type ClaimMapping struct {
	// RemoteClaim denotes the remote claim
	RemoteClaim string `json:"remoteClaim"`
	// LocalClaim denotes the local claim
	LocalClaim string `json:"localClaim"`
}

type CustomClaim struct {
	// Claim name
	//
	// +kubebuilder:validation:MinLength=1
	Claim string `json:"claim,omitempty"`

	// Claim value
	//
	// +kubebuilder:validation:MinLength=1
	Value string `json:"value,omitempty"`

	// Claim type
	//
	// +kubebuilder:default=string
	// +kubebuilder:validation:Enum=string;int;float;bool;long;date
	Type string `json:"type"`
}

type CustomRateLimitPolicy struct {
	// RequestPerUnit is the number of requests allowed per unit time
	//
	// +kubeBuilder:validation:Minimum=1
	RequestsPerUnit uint32 `json:"requestsPerUnit,omitempty"`

	// Unit is the unit of the requestsPerUnit
	//
	// +kubebuilder:validation:Enum=Minute;Hour;Day
	Unit string `json:"unit,omitempty"`

	// Key is the key of the custom policy
	//
	// +kubebuilder:validation:MinLength=1
	Key string `json:"key,omitempty"`

	// Value is the value of the custom policy
	//
	// +optional
	Value string `json:"value,omitempty"`

	// Organization is the organization of the policy
	//
	// +kubeBuilder:validation:MinLength=1
	Organization string `json:"organization,omitempty"`
}

type CustomRateLimitPolicyDef struct {
	Key             string `json:"key,omitempty"`
	Value           string `json:"value,omitempty"`
	RequestsPerUnit uint32 `json:"requestsPerUnit,omitempty"`

	Unit string `json:"unit,omitempty"`
	// RateLimit    RateLimit `json:"rateLimit,omitempty"`
	Organization string `json:"organization,omitempty"`
}

type DeploymentStatus struct {

	// Status denotes the state of the API in its lifecycle.
	// Possible values could be Accepted, Invalid, Deploy etc.
	//
	//
	Status string `json:"status"`

	// Message represents a user friendly message that explains the
	// current state of the API.
	//
	//
	// +optional
	Message string `json:"message"`

	// Accepted represents whether the API is accepted or not.
	//
	//
	Accepted bool `json:"accepted"`

	// TransitionTime represents the last known transition timestamp.
	//
	//
	TransitionTime *metav1.Time `json:"transitionTime"`

	// Events contains a list of events related to the API.
	//
	//
	// +optional
	Events []string `json:"events,omitempty"`
}

type EnvConfig struct {
	// HTTPRouteRefs denotes the environment of the API.
	HTTPRouteRefs []string `json:"httpRouteRefs"`
}

type HealthCheck struct {

	// Timeout is the time to wait for a health check response.
	// If the timeout is reached the health check attempt will be considered a failure.
	//
	// +kubebuilder:default=1
	// +optional
	Timeout uint32 `json:"timeout,omitempty"`

	// Interval is the time between health check attempts in seconds.
	//
	// +kubebuilder:default=30
	// +optional
	Interval uint32 `json:"interval,omitempty"`

	// UnhealthyThreshold is the number of consecutive health check failures required
	// before a backend is marked unhealthy.
	//
	// +kubebuilder:default=2
	// +optional
	UnhealthyThreshold uint32 `json:"unhealthyThreshold,omitempty"`

	// HealthyThreshold is the number of healthy health checks required before a host is marked healthy.
	// Note that during startup, only a single successful health check is required to mark a host healthy.
	//
	// +kubebuilder:default=2
	// +optional
	HealthyThreshold uint32 `json:"healthyThreshold,omitempty"`
}

type InterceptorInclusion string

type InterceptorReference struct {
	// Name is the referced CR's name of InterceptorService resource.
	Name string `json:"name"`
}

type InterceptorService struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   InterceptorServiceSpec   `json:"spec,omitempty"`
	Status InterceptorServiceStatus `json:"status,omitempty"`
}

type InterceptorServiceList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []InterceptorService `json:"items"`
}

type InterceptorServiceSpec struct {
	BackendRef BackendReference `json:"backendRef"`

	// Includes defines the types of data which should be included when calling the interceptor service
	//
	// +optional
	// +kubebuilder:validation:MaxItems=4
	// +nullable
	Includes []InterceptorInclusion `json:"includes,omitempty"`
}

type InterceptorServiceStatus struct {
}

type JWKS struct {
	// URL is the URL of the JWKS endpoint
	URL string `json:"url"`
	// TLS denotes the TLS configuration of the JWKS endpoint
	TLS *CERTConfig `json:"tls,omitempty"`
}

type JWTIssuerMapping map[types.NamespacedName]*ResolvedJWTIssuer

type Oauth2Auth struct {

	// Disabled is to disable OAuth2 authentication
	//
	// +kubebuilder:default:=false
	// +optional
	Disabled bool `json:"disabled"`

	// Header is the header name used to pass the OAuth2 token
	//
	// +kubebuilder:default:=authorization
	// +optional
	Header string `json:"header,omitempty"`

	// SendTokenToUpstream is to specify whether the OAuth2 token should be sent to the upstream
	//
	// +optional
	SendTokenToUpstream bool `json:"sendTokenToUpstream,omitempty"`
}

type PolicySpec struct {
	// RequestInterceptors referenced to intercetor services to be applied
	// to the request flow.
	//
	// +optional
	// +nullable
	// +kubebuilder:validation:MaxItems=1
	RequestInterceptors []InterceptorReference `json:"requestInterceptors,omitempty"`

	// ResponseInterceptors referenced to intercetor services to be applied
	// to the response flow.
	//
	// +optional
	// +nullable
	// +kubebuilder:validation:MaxItems=1
	ResponseInterceptors []InterceptorReference `json:"responseInterceptors,omitempty"`

	// BackendJWTPolicy holds reference to backendJWT policy configurations
	BackendJWTPolicy *BackendJWTToken `json:"backendJwtPolicy,omitempty"`

	// CORS policy to be applied to the API.
	CORSPolicy *CORSPolicy `json:"cORSPolicy,omitempty"`
}

type Property struct {
	Name  string `json:"name,omitempty"`
	Value string `json:"value,omitempty"`
}

type RateLimitAPIPolicy struct {

	// API level ratelimit policy
	//
	// +optional
	API *APIRateLimitPolicy `json:"api,omitempty"`

	// Custom ratelimit policy
	//
	// +optional
	Custom *CustomRateLimitPolicy `json:"custom,omitempty"`
}

type RateLimitPolicy struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   RateLimitPolicySpec   `json:"spec,omitempty"`
	Status RateLimitPolicyStatus `json:"status,omitempty"`
}

type RateLimitPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []RateLimitPolicy `json:"items"`
}

type RateLimitPolicySpec struct {
	Default   *RateLimitAPIPolicy             `json:"default,omitempty"`
	Override  *RateLimitAPIPolicy             `json:"override,omitempty"`
	TargetRef gwapiv1b1.PolicyTargetReference `json:"targetRef,omitempty"`
}

type RateLimitPolicyStatus struct {
}

type RefConfig struct {
	// Name of the secret or configmap
	//
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// Key of the secret or configmap
	//
	// +kubebuilder:validation:MinLength=1
	Key string `json:"key"`
}

type ResolveRateLimit struct {
	// RequestPerUnit is the number of requests allowed per unit time
	//
	RequestsPerUnit uint32 `json:"requestsPerUnit,omitempty"`

	// Unit is the unit of the requestsPerUnit
	//
	// +kubebuilder:validation:Enum=Minute;Hour;Day
	Unit string `json:"unit,omitempty"`
}

type ResolveRateLimitAPIPolicy struct {
	API          ResolveRateLimit  `json:"api,omitempty"`
	Resources    []ResolveResource `json:"resourceList,omitempty"`
	Organization string            `json:"organization,omitempty"`
	BasePath     string            `json:"basePath,omitempty"`
	UUID         string            `json:"uuid,omitempty"`
	Environment  string            `json:"environment,omitempty"`
}

type ResolveResource struct {
	ResourceRatelimit ResolveRateLimit        `json:"resourceRatelimit,omitempty"`
	Path              string                  `json:"path,omitempty"`
	PathMatchType     gwapiv1b1.PathMatchType `json:"pathMatchType,omitempty"`
	Method            string                  `json:"method,omitempty"`
}

type ResolvedBackend struct {
	Backend        Backend
	Services       []Service
	Protocol       BackendProtocolType
	TLS            ResolvedTLSConfig
	Security       ResolvedSecurityConfig
	CircuitBreaker *CircuitBreaker
	Timeout        *Timeout
	Retry          *RetryConfig
	BasePath       string `json:"basePath"`
	HealthCheck    *HealthCheck
}

type ResolvedBasicSecurityConfig struct {
	Username string
	Password string
}

type ResolvedJWKS struct {
	URL string
	TLS *ResolvedTLSConfig
}

type ResolvedJWTIssuer struct {
	Name                string
	Organization        string
	Issuer              string
	ConsumerKeyClaim    string
	ScopesClaim         string
	SignatureValidation ResolvedSignatureValidation
	ClaimMappings       map[string]string
	Environments        []string
}

type ResolvedSecurityConfig struct {
	Type  string
	Basic ResolvedBasicSecurityConfig
}

type ResolvedSignatureValidation struct {
	JWKS        *ResolvedJWKS
	Certificate *ResolvedTLSConfig
}

type ResolvedTLSConfig struct {
	ResolvedCertificate string
	AllowedSANs         []string
}

type RetryConfig struct {

	// Count defines the number of retries.
	// If exceeded, TooEarly(425 response code) response will be sent to the client.
	//
	// +kubebuilder:default=1
	Count uint32 `json:"count"`

	// BaseIntervalMillis is exponential retry back off and it defines the base interval between retries in milliseconds.
	// maximum interval is 10 times of the BaseIntervalMillis
	//
	// +kubebuilder:default=25
	// +kubebuilder:validation:Minimum=1
	// +optional
	BaseIntervalMillis uint32 `json:"baseIntervalMillis"`

	// StatusCodes defines the list of status codes to retry
	//
	// +optional
	StatusCodes []uint32 `json:"statusCodes,omitempty"`
}

type Scope struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   ScopeSpec   `json:"spec,omitempty"`
	Status ScopeStatus `json:"status,omitempty"`
}

type ScopeList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Scope `json:"items"`
}

type ScopeSpec struct {

	// Name scope name
	//
	// +kubebuilder:validation:MinItems=1
	Names []string `json:"names,omitempty"`
}

type ScopeStatus struct {
}

type SecretRef struct {
	// Name of the secret
	//
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// Namespace of the secret
	//
	// +kubebuilder:validation:MinLength=1
	UsernameKey string `json:"usernameKey"`

	// Key of the secret
	//
	// +kubebuilder:validation:MinLength=1
	PasswordKey string `json:"passwordKey"`
}

type SecurityConfig struct {
	// Basic security configuration
	Basic *BasicSecurityConfig `json:"basic,omitempty"`
}

type Service struct {
	// Host is the hostname of the service
	//
	// +kubebuilder:validation:MinLength=1
	Host string `json:"host"`

	// Port of the service
	Port uint32 `json:"port"`
}

type SignatureValidation struct {
	// JWKS denotes the JWKS endpoint information
	JWKS *JWKS `json:"jwks,omitempty"`
	// Certificate denotes the certificate information
	Certificate *CERTConfig `json:"certificate,omitempty"`
}

type TLSConfig struct {
	// CertificateInline is the Inline Certificate entry
	CertificateInline *string `json:"certificateInline,omitempty"`

	// SecretRef denotes the reference to the Secret that contains the Certificate
	SecretRef *RefConfig `json:"secretRef,omitempty"`

	// ConfigMapRef denotes the reference to the ConfigMap that contains the Certificate
	ConfigMapRef *RefConfig `json:"configMapRef,omitempty"`

	// AllowedCNs is the list of allowed Subject Alternative Names (SANs)
	//
	// +optional
	AllowedSANs []string `json:"allowedSANs,omitempty"`
}

type TestConsoleKeyAuth struct {
	// Header is the header name used to pass the Test Console Key
	//
	// +kubebuilder:default:=internal-key
	// +optional
	// +kubebuilder:validation:MinLength=1
	Header string `json:"header,omitempty"`

	// SendTokenToUpstream is to specify whether the Test Console Key should be sent to the upstream
	//
	// +optional
	SendTokenToUpstream bool `json:"sendTokenToUpstream,omitempty"`
}

type Timeout struct {
	// UpstreamResponseTimeout spans between the point at which the entire downstream request (i.e. end-of-stream) has been processed and
	// when the upstream response has been completely processed.
	// A value of 0 will disable the route’s timeout.
	//
	// +kubebuilder:default=15
	UpstreamResponseTimeout uint32 `json:"upstreamResponseTimeout"`

	// DownstreamRequestIdleTimeout bounds the amount of time the request's stream may be idle.
	// A value of 0 will completely disable the route's idle timeout.
	//
	// +kubebuilder:default=300
	// +optional
	DownstreamRequestIdleTimeout uint32 `json:"downstreamRequestIdleTimeout"`
}

type TokenIssuer struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   TokenIssuerSpec   `json:"spec,omitempty"`
	Status TokenIssuerStatus `json:"status,omitempty"`
}

type TokenIssuerList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []TokenIssuer `json:"items"`
}

type TokenIssuerSpec struct {
	// Name is the unique name of the Token Issuer in
	// the Organization defined . "Organization/Name" can
	// be used to uniquely identify an Issuer.
	//
	// +kubebuilder:validation:MinLength=1
	Name string `json:"name"`

	// Organization denotes the organization of the Token Issuer.
	//
	// +kubebuilder:validation:MinLength=1
	Organization string `json:"organization"`

	// Issuer denotes the issuer of the Token Issuer.
	//
	// +kubebuilder:validation:MinLength=1
	Issuer string `json:"issuer"`

	// ConsumerKeyClaim denotes the claim key of the consumer key.
	//
	// +kubebuilder:validation:MinLength=1
	ConsumerKeyClaim string `json:"consumerKeyClaim"`

	// ScopesClaim denotes the claim key of the scopes.
	//
	// +kubebuilder:validation:MinLength=1
	ScopesClaim string `json:"scopesClaim"`

	// SignatureValidation denotes the signature validation method of jwt
	SignatureValidation *SignatureValidation `json:"signatureValidation"`

	// ClaimMappings denotes the claim mappings of the jwt
	ClaimMappings *[]ClaimMapping `json:"claimMappings,omitempty"`

	// TargetRef denotes the reference to the which gateway it applies to
	TargetRef *gwapiv1b1.PolicyTargetReference `json:"targetRef,omitempty"`
}

type TokenIssuerStatus struct {
}