#
# Copyright (c) 2019 Oracle and/or its affiliates. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

security {
    config {
        # Configuration of secured config (encryption of passwords in property files)

        # Set to true for production - if set to true, clear text passwords will cause failure
        require-encryption = false
    }

    # composite provider policy
    provider-policy {
        type = "COMPOSITE"
        authentication: [
            {
                # must be present
                name = "http-basic-auth"
            }
        ]
    }

    providers: [
        # Security provider - basic authentication (supports roles)
        {
            http-basic-auth {
                realm = "mic"
                users: [
                    {
                        login = "Ted"
                        password = "${CLEAR=secret}"
                        roles = ["user", "admin"]

                    },
                    {
                        login = "Bob"
                        password = "${CLEAR=password}"
                        roles = ["user"]
                    }
                ]
            }
        },

    ]

    grpc-server {
        # Configuration of integration with grpc server
        # The default configuration to apply to all services not explicitly configured below
        defaults {
            authenticate = true
        }
        services: [
            {
                name = "EchoService"
                defaults {
                    roles-allowed = ["admin"]
                }
            },
            {
                name = "StringService"
                methods: [
                    {
                        name: "Upper"
                        roles-allowed = ["admin"]
                    },
                    {
                        name: "Split"
                        roles-allowed = ["admin"]
                    }
                ]
            }
        ]
    }
}
