config

type AuthenticationConfiguration struct {
	Method      AuthenticationMethod        `json:"method"`
	Credentials EnvironmentAwareCredentials `json:"credentials"`
}

type AuthenticationMethod string

type CacheConfiguration struct {
	Limit               int `json:"limit"              `
	ExpirationInSeconds int `json:"expirationInSeconds"`
}

type CipherSuite string

type CipherSuiteList []CipherSuite

type EnvironmentAwareCredentials map[string]EnvironmentAwareValue

type EnvironmentAwareValue string

type IntrospectionConfiguration struct {
	Endpoint string `json:"endpoint"`
	// configure how to authenticate with introspection endpoint
	AuthenticationConfig *AuthenticationConfiguration `json:"authentication"`
	TLSConnectionConfig  *TLSConnectionConfiguration  `json:"tlsConnection" `
}

type JWSConfiguration struct {
	Endpoint            string                      `json:"endpoint"     `
	TLSConnectionConfig *TLSConnectionConfiguration `json:"tlsConnection"`
}

type JWTConfiguration struct {
	// define a field name in JWT token used to retrieve scopes/roles
	// which are used to perform authorization check
	AuthorizationField string `json:"authorizationField"`

	// if introspection API is provided, use it instead of JWT
	PreferIntrospection bool `json:"preferIntrospection"`
}

type SecurityConfiguration struct {
	TLSConfig             *TLSConfiguration             `json:"tls"`
	TokenValidationConfig *TokenValidationConfiguration `json:"tokenValidation"`
}

type TLSAdvancedConfiguration struct {
	// preferred cipher suites
	CipherSuites CipherSuiteList `json:"cipherSuites"`
}

type TLSConfiguration struct {
	AutoGenerate bool `json:"auto"`
	// path to cert file, if auto generate, it's the output file
	CertFile EnvironmentAwareValue `json:"certFile"`
	// path to key file, if auto generate, it's the output file
	KeyFile EnvironmentAwareValue `json:"keyFile"`
	// advanced tls configuration
	AdvancedConfig *TLSAdvancedConfiguration `json:"advanced"`
}

type TLSConnectionConfiguration struct {
	InsecureSkipVerify bool `json:"insecureSkipVerify"`
	// server certificate
	// will be ignored if insecureSkipVerify is true
	CertFile EnvironmentAwareValue `json:"certFile"`
	// certificate of CA which signs server certificate
	// will be ignored if insecureSkipVerify is true
	CaFile EnvironmentAwareValue `json:"caFile"`
	// advanced configuration for TLS
	AdvancedConfig *TLSAdvancedConfiguration `json:"advanced"`
}

type TokenValidationConfiguration struct {
	// name of a node which is the recipient of the token
	// we don't allow to configure this, instead, it has to come from geth during initialization
	Aud string `json:"-"`
	// this corresponds to `iss` claim which identifies the principal
	// that issued the token
	Issuers             []string                    `json:"issuers"`
	CacheConfig         *CacheConfiguration         `json:"cache"`
	IntrospectionConfig *IntrospectionConfiguration `json:"introspect"`
	JWSConfig           *JWSConfiguration           `json:"jws"`
	JWTConfig           *JWTConfiguration           `json:"jwt"`
}