---
version: 1.1

oauth2:  # OAuth2

  client:  # OAuth2 client

    server_domainname:
      type: domainname
      supplier: OAuth2
      hidden: true

    is_client_application:
      hidden: true
      default: false

    name:
      description: OAuth2 client name
      supplier: OAuth2:name
      examples:
        - example
      disabled: &id001
        variable: _.is_client_application
        when: false

    description:
      description: OAuth2 client description
      supplier: OAuth2:description
      examples:
        - Example description
      disabled: *id001

    login:
      type: web_address
      description: OAuth2 URL to valid login
      supplier: OAuth2:login
      mandatory: false

    external:

      external:
        type: web_address
        description: OAuth2 client external
        multi: true
        supplier: OAuth2:external
        disabled: &id002
          variable: __.is_client_application
          when: false
        default:
          jinja: |-
            {%- for domain in general.revprox.client.external_domainnames
                 | calc_oauth2_client_external(general.revprox.client.location)
               %}
            {{ domain }}
            {%- endfor -%}

      family:
        description: OAuth2 family
        supplier: OAuth2:family
        default: users
        disabled: *id002

    category:
      description: OAuth2 category
      supplier: OAuth2:category
      default: Défaut

    logo:
      description: OAuth2 logo
      supplier: OAuth2:logo
      default: demo.png

    id:
      description: OAuth2 ID
      hidden: true
      supplier: OAuth2:client_id
      default:
        jinja: >-
          {{ general.network.interface_0.domain_name | normalize_family }}

    secret:
      type: secret
      description: OAuth2 secret
      hidden: true
      supplier: OAuth2:secret
      default:
        jinja: >-
          {{ _.id |
            get_password(server_name=general.network.interface_0.domain_name,
                         description="remote",
                         type="cleartext",
                         hide=general.hide_secret)
            }}

    token_signature_algo:
      description: OAuth2 token signature algorithm
      hidden: true
      supplier: OAuth2:token_signature_algo
      default: HS512
      choices:
        - HS512
        - RS256

    domainname:
      description: OAuth2 server domain name
      type: domainname
      provider: OAuth2:external_domain
      hidden: true