namespace SQLInsight.Web;

public sealed class WebOptions
{
    public const string SectionName = "SQLInsight:Web";

    /// <summary>Windows (Negotiate/Kerberos) or None. None is for development only.</summary>
    public string Authentication { get; set; } = "Windows";

    /// <summary>Windows groups allowed to use the UI (e.g. DOMAIN\SQL-Admins). Empty: any authenticated user.</summary>
    public IList<string> AllowedGroups { get; } = [];

    /// <summary>Time zone for display, e.g. Europe/Copenhagen. Defaults to the server's local time zone.</summary>
    public string? TimeZone { get; set; }

    /// <summary>
    /// Tokens for /api/ and /metrics (name → "sha256:&lt;hex&gt;"). Create one with <c>SQLInsight.Web new-api-token &lt;name&gt;</c>.
    /// </summary>
    public IDictionary<string, string> ApiTokens { get; } = new Dictionary<string, string>();

    /// <summary>Include evidence marked sensitive (query text, logins, host names) in /api/v1/findings. Off by default.</summary>
    public bool ApiIncludesSensitiveEvidence { get; set; }

    /// <summary>Name shown on reports, e.g. the company or department.</summary>
    public string Organization { get; set; } = "SQL Server-miljøet";

    /// <summary>The SQLInsight Pro website (documentation, downloads, support plans), linked from the menu.</summary>
    public Uri CommunityUrl { get; set; } = new("https://sqlinsight.seosoft.dk/");

    /// <summary>The community forum, linked from the menu.</summary>
    public Uri ForumUrl { get; set; } = new("https://forum.seosoft.dk/c/sqlinsight");
}