rpcpb

type AccountsClient interface {
	// GetSelf returns information about the caller based on passed
	// authentication tokens.
	//
	// Also returns the caller's IP address (as seen by the service). Useful when
	// debugging authentication issues.
	GetSelf(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*SelfInfo, error)
}

type AccountsServer interface {
	// GetSelf returns information about the caller based on passed
	// authentication tokens.
	//
	// Also returns the caller's IP address (as seen by the service). Useful when
	// debugging authentication issues.
	GetSelf(context.Context, *emptypb.Empty) (*SelfInfo, error)
	// contains filtered or unexported methods
}

type Allowlist struct {
	Name        string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`                            // e.g: "some-allowlist"
	Subnets     []string               `protobuf:"bytes,2,rep,name=subnets,proto3" json:"subnets,omitempty"`                      // e.g: ["127.0.0.1/24"]
	Description string                 `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`              // e.g: "This allowlist is for ..."
	CreatedTs   *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=created_ts,json=createdTs,proto3" json:"created_ts,omitempty"` // e.g: "1972-01-01T10:00:20.021Z"
	CreatedBy   string                 `protobuf:"bytes,5,opt,name=created_by,json=createdBy,proto3" json:"created_by,omitempty"` // e.g: "user:test@example.com"
	// contains filtered or unexported fields
}

type AllowlistsClient interface {
	// ListAllowlists returns all the allowlists currently stored in LUCI Auth
	// service datastore. The allowlists will be returned in alphabetical order
	// based on their ID.
	ListAllowlists(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*ListAllowlistsResponse, error)
	// GetAllowlist returns Allowlist information for a requested Allowlist.
	GetAllowlist(ctx context.Context, in *GetAllowlistRequest, opts ...grpc.CallOption) (*Allowlist, error)
}

type AllowlistsServer interface {
	// ListAllowlists returns all the allowlists currently stored in LUCI Auth
	// service datastore. The allowlists will be returned in alphabetical order
	// based on their ID.
	ListAllowlists(context.Context, *emptypb.Empty) (*ListAllowlistsResponse, error)
	// GetAllowlist returns Allowlist information for a requested Allowlist.
	GetAllowlist(context.Context, *GetAllowlistRequest) (*Allowlist, error)
	// contains filtered or unexported methods
}

type AuthDBChange struct {

	// Fields common across all change types.
	ChangeType     string                 `protobuf:"bytes,1,opt,name=change_type,json=changeType,proto3" json:"change_type,omitempty"`
	Target         string                 `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
	AuthDbRev      int64                  `protobuf:"varint,3,opt,name=auth_db_rev,json=authDbRev,proto3" json:"auth_db_rev,omitempty"`
	Who            string                 `protobuf:"bytes,4,opt,name=who,proto3" json:"who,omitempty"`
	When           *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=when,proto3" json:"when,omitempty"`
	Comment        string                 `protobuf:"bytes,6,opt,name=comment,proto3" json:"comment,omitempty"`
	AppVersion     string                 `protobuf:"bytes,7,opt,name=app_version,json=appVersion,proto3" json:"app_version,omitempty"`
	Description    string                 `protobuf:"bytes,8,opt,name=description,proto3" json:"description,omitempty"`
	OldDescription string                 `protobuf:"bytes,9,opt,name=old_description,json=oldDescription,proto3" json:"old_description,omitempty"`
	// Fields specific to AuthDBGroupChange.
	Owners    string   `protobuf:"bytes,10,opt,name=owners,proto3" json:"owners,omitempty"`
	OldOwners string   `protobuf:"bytes,11,opt,name=old_owners,json=oldOwners,proto3" json:"old_owners,omitempty"`
	Members   []string `protobuf:"bytes,12,rep,name=members,proto3" json:"members,omitempty"`
	Globs     []string `protobuf:"bytes,13,rep,name=globs,proto3" json:"globs,omitempty"`
	Nested    []string `protobuf:"bytes,14,rep,name=nested,proto3" json:"nested,omitempty"`
	// Fields specific to AuthDBIPAllowlistChange.
	Subnets []string `protobuf:"bytes,15,rep,name=subnets,proto3" json:"subnets,omitempty"`
	// Fields specific to AuthDBIPAllowlistAssignmentChange.
	Identity    string `protobuf:"bytes,16,opt,name=identity,proto3" json:"identity,omitempty"`
	IpAllowList string `protobuf:"bytes,17,opt,name=ip_allow_list,json=ipAllowList,proto3" json:"ip_allow_list,omitempty"`
	// Fields specific to AuthDBConfigChange.
	OauthClientId            string   `protobuf:"bytes,18,opt,name=oauth_client_id,json=oauthClientId,proto3" json:"oauth_client_id,omitempty"`
	OauthClientSecret        string   `protobuf:"bytes,19,opt,name=oauth_client_secret,json=oauthClientSecret,proto3" json:"oauth_client_secret,omitempty"`
	OauthAdditionalClientIds []string `` /* 138-byte string literal not displayed */
	TokenServerUrlOld        string   `protobuf:"bytes,21,opt,name=token_server_url_old,json=tokenServerUrlOld,proto3" json:"token_server_url_old,omitempty"`
	TokenServerUrlNew        string   `protobuf:"bytes,22,opt,name=token_server_url_new,json=tokenServerUrlNew,proto3" json:"token_server_url_new,omitempty"`
	SecurityConfigOld        string   `protobuf:"bytes,23,opt,name=security_config_old,json=securityConfigOld,proto3" json:"security_config_old,omitempty"`
	SecurityConfigNew        string   `protobuf:"bytes,24,opt,name=security_config_new,json=securityConfigNew,proto3" json:"security_config_new,omitempty"`
	// Fields specific to AuthRealmsGlobalsChange.
	PermissionsAdded   []string `protobuf:"bytes,25,rep,name=permissions_added,json=permissionsAdded,proto3" json:"permissions_added,omitempty"`
	PermissionsChanged []string `protobuf:"bytes,26,rep,name=permissions_changed,json=permissionsChanged,proto3" json:"permissions_changed,omitempty"`
	PermissionsRemoved []string `protobuf:"bytes,27,rep,name=permissions_removed,json=permissionsRemoved,proto3" json:"permissions_removed,omitempty"`
	// Fields specific to AuthProjectRealmsChange.
	ConfigRevOld string `protobuf:"bytes,28,opt,name=config_rev_old,json=configRevOld,proto3" json:"config_rev_old,omitempty"`
	ConfigRevNew string `protobuf:"bytes,29,opt,name=config_rev_new,json=configRevNew,proto3" json:"config_rev_new,omitempty"`
	PermsRevOld  string `protobuf:"bytes,30,opt,name=perms_rev_old,json=permsRevOld,proto3" json:"perms_rev_old,omitempty"`
	PermsRevNew  string `protobuf:"bytes,31,opt,name=perms_rev_new,json=permsRevNew,proto3" json:"perms_rev_new,omitempty"`
	// contains filtered or unexported fields
}

type AuthDBClient interface {
	// GetSnapshot serves the deflated AuthDB proto
	// message with snapshot of all groups.
	GetSnapshot(ctx context.Context, in *GetSnapshotRequest, opts ...grpc.CallOption) (*Snapshot, error)
}

type AuthDBServer interface {
	// GetSnapshot serves the deflated AuthDB proto
	// message with snapshot of all groups.
	GetSnapshot(context.Context, *GetSnapshotRequest) (*Snapshot, error)
	// contains filtered or unexported methods
}

type AuthGroup struct {
	Name        string                 `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`                            // e.g: "auth-service-access"
	Members     []string               `protobuf:"bytes,2,rep,name=members,proto3" json:"members,omitempty"`                      // e.g: ["user:t@example.com"]
	Globs       []string               `protobuf:"bytes,3,rep,name=globs,proto3" json:"globs,omitempty"`                          // e.g: ["user:*@example.com"
	Nested      []string               `protobuf:"bytes,4,rep,name=nested,proto3" json:"nested,omitempty"`                        // e.g: ["another-group-0", "another-group-1"]
	Description string                 `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`              // e.g: "This group is used for ..."
	Owners      string                 `protobuf:"bytes,6,opt,name=owners,proto3" json:"owners,omitempty"`                        // e.g: "administrators"
	CreatedTs   *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=created_ts,json=createdTs,proto3" json:"created_ts,omitempty"` // e.g: "1972-01-01T10:00:20.021Z"
	CreatedBy   string                 `protobuf:"bytes,8,opt,name=created_by,json=createdBy,proto3" json:"created_by,omitempty"` // e.g: "user:test@example.com"
	// Output only. Whether the caller can modify this group.
	CallerCanModify bool `protobuf:"varint,9,opt,name=caller_can_modify,json=callerCanModify,proto3" json:"caller_can_modify,omitempty"`
	// An opaque string that indicates the version of the group being edited.
	// This will be sent to the client in responses, and should be sent back
	// to the server for update and delete requests in order to protect against
	// concurrent modification errors. See https://google.aip.dev/154.
	// Technically this is a "weak etag", meaning that if two AuthGroups have the
	// same etag, they are not guaranteed to be byte-for-byte identical. This is
	// because under the hood we generate it based on the last-modified time
	// (though this should not be relied on as it may change in future).
	Etag string `protobuf:"bytes,99,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

type ChangeLogsClient interface {
	// ListChangeLogs returns all the change logs in Datastore.
	ListChangeLogs(ctx context.Context, in *ListChangeLogsRequest, opts ...grpc.CallOption) (*ListChangeLogsResponse, error)
}

type ChangeLogsServer interface {
	// ListChangeLogs returns all the change logs in Datastore.
	ListChangeLogs(context.Context, *ListChangeLogsRequest) (*ListChangeLogsResponse, error)
	// contains filtered or unexported methods
}

type CreateGroupRequest struct {

	// Details of the group to create. Not all fields will be written to the new
	// group: if the request specifies fields that should be automatically
	// generated (e.g. created/modified timestamps), these will be ignored.
	Group *AuthGroup `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	// contains filtered or unexported fields
}

type DeleteGroupRequest struct {

	// Name of the group to delete.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The current etag of the group.
	// If an etag is provided and does not match the current etag of the group,
	// deletion will be blocked and an ABORTED error will be returned.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

type GetAllowlistRequest struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // e.g: "some-allowlist"
	// contains filtered or unexported fields
}

type GetGroupRequest struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` // e.g: "administrators"
	// contains filtered or unexported fields
}

type GetSnapshotRequest struct {

	// Version of the snapshot to get or 0 to get the latest one.
	// Not all versions may be available (i.e. there may be gaps in revision
	// numbers).
	Revision int64 `protobuf:"varint,1,opt,name=revision,proto3" json:"revision,omitempty"`
	// If true response will not return actual snapshot, just its SHA256
	// hash, revision number and timestamp.
	SkipBody bool `protobuf:"varint,2,opt,name=skip_body,json=skipBody,proto3" json:"skip_body,omitempty"`
	// contains filtered or unexported fields
}

type GetSubgraphRequest struct {
	Principal *Principal `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	// contains filtered or unexported fields
}

type GroupsClient interface {
	// ListGroups returns all the groups currently stored in LUCI Auth service
	// datastore. The groups will be returned in alphabetical order based on their
	// ID.
	ListGroups(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*ListGroupsResponse, error)
	// GetGroup returns information about an individual group, given the name.
	GetGroup(ctx context.Context, in *GetGroupRequest, opts ...grpc.CallOption) (*AuthGroup, error)
	// CreateGroup creates a new group.
	CreateGroup(ctx context.Context, in *CreateGroupRequest, opts ...grpc.CallOption) (*AuthGroup, error)
	// UpdateGroup updates an existing group.
	UpdateGroup(ctx context.Context, in *UpdateGroupRequest, opts ...grpc.CallOption) (*AuthGroup, error)
	// DeleteGroup deletes a group.
	DeleteGroup(ctx context.Context, in *DeleteGroupRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// GetSubgraph returns a Subgraph without information about groups that
	// include a principal (perhaps indirectly or via globs). Here a principal is
	// either an identity, a group or a glob (see PrincipalKind enum).
	GetSubgraph(ctx context.Context, in *GetSubgraphRequest, opts ...grpc.CallOption) (*Subgraph, error)
}

type GroupsServer interface {
	// ListGroups returns all the groups currently stored in LUCI Auth service
	// datastore. The groups will be returned in alphabetical order based on their
	// ID.
	ListGroups(context.Context, *emptypb.Empty) (*ListGroupsResponse, error)
	// GetGroup returns information about an individual group, given the name.
	GetGroup(context.Context, *GetGroupRequest) (*AuthGroup, error)
	// CreateGroup creates a new group.
	CreateGroup(context.Context, *CreateGroupRequest) (*AuthGroup, error)
	// UpdateGroup updates an existing group.
	UpdateGroup(context.Context, *UpdateGroupRequest) (*AuthGroup, error)
	// DeleteGroup deletes a group.
	DeleteGroup(context.Context, *DeleteGroupRequest) (*emptypb.Empty, error)
	// GetSubgraph returns a Subgraph without information about groups that
	// include a principal (perhaps indirectly or via globs). Here a principal is
	// either an identity, a group or a glob (see PrincipalKind enum).
	GetSubgraph(context.Context, *GetSubgraphRequest) (*Subgraph, error)
	// contains filtered or unexported methods
}

type ListAllowlistsResponse struct {

	// List of all allowlists.
	Allowlists []*Allowlist `protobuf:"bytes,1,rep,name=allowlists,proto3" json:"allowlists,omitempty"`
	// contains filtered or unexported fields
}

type ListChangeLogsRequest struct {

	// AuthDB revision that the change log was made.
	AuthDbRev int64 `protobuf:"varint,1,opt,name=auth_db_rev,json=authDbRev,proto3" json:"auth_db_rev,omitempty"`
	// Entity that was changed in the change log.
	Target string `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
	// The value of next_page_token received in a ListChangeLogsResponse. Used
	// to get the next page of change logs. If empty, gets the first page.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// The maximum number of change logs to include in the response.
	PageSize int32 `protobuf:"varint,4,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// contains filtered or unexported fields
}

type ListChangeLogsResponse struct {

	// A list of change logs.
	Changes []*AuthDBChange `protobuf:"bytes,1,rep,name=changes,proto3" json:"changes,omitempty"`
	// The value to use as the page_token in a ListChangeLogsRequest to get the
	// next page of change logs. If empty, there are no more change logs.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListGroupsResponse struct {

	// List of all groups. In order to keep the response lightweight, each
	// AuthGroup will contain only metadata, i.e. the membership list fields will
	// be left empty.
	Groups []*AuthGroup `protobuf:"bytes,1,rep,name=groups,proto3" json:"groups,omitempty"`
	// contains filtered or unexported fields
}

type ListReplicasResponse struct {

	// State of Auth Service's latest AuthDB revision.
	PrimaryRevision *protocol.AuthDBRevision `protobuf:"bytes,1,opt,name=primary_revision,json=primaryRevision,proto3" json:"primary_revision,omitempty"`
	// Value of components.auth.version.__version__ used by primary.
	AuthCodeVersion string `protobuf:"bytes,2,opt,name=auth_code_version,json=authCodeVersion,proto3" json:"auth_code_version,omitempty"`
	// All replica services' states that have Auth Service configured as their
	// primary service from which to receive AuthDB replication calls.
	Replicas []*ReplicaState `protobuf:"bytes,3,rep,name=replicas,proto3" json:"replicas,omitempty"`
	// When the ListReplicas request was processed, according to Auth Service's
	// clock.
	ProcessedAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=processed_at,json=processedAt,proto3" json:"processed_at,omitempty"`
	// contains filtered or unexported fields
}

type Node struct {

	// The principal represented by this node.
	Principal *Principal `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	// Nodes that directly include this principal.
	//
	// Each item is an index of a Node in Subgraph's `nodes` list.
	IncludedBy []int32 `protobuf:"varint,2,rep,packed,name=included_by,json=includedBy,proto3" json:"included_by,omitempty"`
	// contains filtered or unexported fields
}

type Principal struct {
	Kind PrincipalKind `protobuf:"varint,1,opt,name=kind,proto3,enum=auth.service.PrincipalKind" json:"kind,omitempty"` // e.g. IDENTITY, GROUP, GLOB
	Name string        `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`                                  // e.g. "user*@example.com", "some-group", "user:m0@example.com"
	// contains filtered or unexported fields
}

type PrincipalKind int32

type ReplicaPushStatus int32

type ReplicaState struct {

	// The App ID of the replica.
	AppId string `protobuf:"bytes,1,opt,name=app_id,json=appId,proto3" json:"app_id,omitempty"`
	// Base URL of the replica host which can receive AuthDB push updates, e.g.
	// "https://luci-config-dev.appspot.com"
	BaseUrl string `protobuf:"bytes,2,opt,name=base_url,json=baseUrl,proto3" json:"base_url,omitempty"`
	// The replica's current AuthDB revision.
	AuthDbRev int64 `protobuf:"varint,3,opt,name=auth_db_rev,json=authDbRev,proto3" json:"auth_db_rev,omitempty"`
	// Timestamp of when the replica's current AuthDB revision was created (by
	// the primary service's clock).
	RevModified *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=rev_modified,json=revModified,proto3" json:"rev_modified,omitempty"`
	// Value of components.auth.version.__version__ used by the replica.
	AuthCodeVersion string `protobuf:"bytes,5,opt,name=auth_code_version,json=authCodeVersion,proto3" json:"auth_code_version,omitempty"`
	// Timestamp of when the last push attempt started.
	PushStarted *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=push_started,json=pushStarted,proto3" json:"push_started,omitempty"`
	// Timestamp of when the last push attempt finished (regardless of status).
	PushFinished *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=push_finished,json=pushFinished,proto3" json:"push_finished,omitempty"`
	// Status of the last push attempt.
	PushStatus ReplicaPushStatus `` /* 128-byte string literal not displayed */
	// Error message of the last push attempt. If the last push attempt was
	// successful, this will be an empty string.
	PushError string `protobuf:"bytes,9,opt,name=push_error,json=pushError,proto3" json:"push_error,omitempty"`
	// contains filtered or unexported fields
}

type ReplicasClient interface {
	// ListReplicas lists the replicas that have been linked with Auth Service
	// as their primary AuthDB service.
	ListReplicas(ctx context.Context, in *emptypb.Empty, opts ...grpc.CallOption) (*ListReplicasResponse, error)
}

type ReplicasServer interface {
	// ListReplicas lists the replicas that have been linked with Auth Service
	// as their primary AuthDB service.
	ListReplicas(context.Context, *emptypb.Empty) (*ListReplicasResponse, error)
	// contains filtered or unexported methods
}

type SelfInfo struct {
	Identity string `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"` // e.g. "user:someone@example.com"
	Ip       string `protobuf:"bytes,2,opt,name=ip,proto3" json:"ip,omitempty"`             // e.g. "192.168.0.1"
	// contains filtered or unexported fields
}

type Snapshot struct {

	// Revision number of this Snapshot.
	AuthDbRev int64 `protobuf:"varint,1,opt,name=auth_db_rev,json=authDbRev,proto3" json:"auth_db_rev,omitempty"`
	// SHA256 hash for this Snapshot.
	AuthDbSha256 string `protobuf:"bytes,2,opt,name=auth_db_sha256,json=authDbSha256,proto3" json:"auth_db_sha256,omitempty"`
	// Deflated AuthDB proto message, omitted if skip_body is true.
	AuthDbDeflated []byte `protobuf:"bytes,3,opt,name=auth_db_deflated,json=authDbDeflated,proto3" json:"auth_db_deflated,omitempty"`
	// Time that this Snapshot was created.
	CreatedTs *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=created_ts,json=createdTs,proto3" json:"created_ts,omitempty"`
	// contains filtered or unexported fields
}

type Subgraph struct {
	Nodes []*Node `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedAccountsServer struct {
}

type UnimplementedAllowlistsServer struct {
}

type UnimplementedAuthDBServer struct {
}

type UnimplementedChangeLogsServer struct {
}

type UnimplementedGroupsServer struct {
}

type UnimplementedReplicasServer struct {
}

type UnsafeAccountsServer interface {
	// contains filtered or unexported methods
}

type UnsafeAllowlistsServer interface {
	// contains filtered or unexported methods
}

type UnsafeAuthDBServer interface {
	// contains filtered or unexported methods
}

type UnsafeChangeLogsServer interface {
	// contains filtered or unexported methods
}

type UnsafeGroupsServer interface {
	// contains filtered or unexported methods
}

type UnsafeReplicasServer interface {
	// contains filtered or unexported methods
}

type UpdateGroupRequest struct {

	// Details of the group to update. The group's 'name' field is used to
	// identify the group to update.
	Group *AuthGroup `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	// The list of fields to be updated.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}