clouds

type Account struct {
	ID          string
	DisplayName string
	Description string
}

type AccountManager interface {

	// GetServiceAccounts returns a chan for per service account for the given project.
	// Ends writing when all service accounts are sent or ctx is cancels.
	GetServiceAccounts(ctx context.Context, project string) (<-chan *Account, error)

	// RemoveServiceAccount removes a service account related to the given project.
	RemoveServiceAccount(ctx context.Context, project, accountID string) error

	// ManageAccountKeys maintains or removes keys on a clean-up cycle. Returns: remaining keys for account, removed keys for account, and error.
	ManageAccountKeys(ctx context.Context, project, accountID string, ttl, maxKeyTTL time.Duration, now time.Time, keysPerAccount int64) (int, int, error)
}

type MockAccountManager struct {
	// contains filtered or unexported fields
}

type MockAccountManagerEntry struct {
	Call           string
	AccountID      string
	Project        string
	TTL            time.Duration
	MaxKeyTTL      time.Duration
	Now            time.Time
	KeysPerAccount int64
}

type MockTokenCreator struct {
	// contains filtered or unexported fields
}

type MockTokenCreatorEntry struct {
	AccountID string
	TokenID   string
	TTL       time.Duration
	MaxTTL    time.Duration
	NumKeys   int
	Params    ResourceTokenCreationParams
	IssuedAt  int64
	Expires   int64
	Token     string
}

type ResourceTokenCreationParams struct {
	AccountProject string
	Items          []map[string]string
	Roles          []string
	Scopes         []string
	TokenFormat    string
	BillingProject string
}

type ResourceTokenCreator interface {

	// RegisterAccountProject registers account hosting project in key garbage collector.
	RegisterAccountProject(project string, tx storage.Tx) error

	// UnregisterAccountProject (eventually) removes a project from the active state, and allows cleanup work to be performed.
	UnregisterAccountProject(project string, tx storage.Tx) error

	// UpdateSettings alters resource management settings.
	UpdateSettings(maxRequestedTTL time.Duration, keysPerAccount int, tx storage.Tx) error

	// MintTokenWithTTL returns an account and a newly minted resource token for resource accessing.
	MintTokenWithTTL(ctx context.Context, id string, ttl, maxTTL time.Duration, numKeys int, params *ResourceTokenCreationParams) (*ResourceTokenResult, error)

	// GetTokenMetadata returns an access token based on its name.
	GetTokenMetadata(ctx context.Context, project, id, name string) (*cpb.TokenMetadata, error)

	// ListTokenMetadata returns a list of outstanding access tokens.
	ListTokenMetadata(ctx context.Context, project, id string) ([]*cpb.TokenMetadata, error)

	// DeleteTokens removes tokens belonging to 'id' with given names.
	// If 'names' is empty, delete all tokens belonging to 'id'.
	DeleteTokens(ctx context.Context, project, id string, names []string) error
}

type ResourceTokenResult struct {
	Account    string
	Token      string
	AccountKey string
	Format     string
}