/*
 * Artifact Keeper API
 *
 * Enterprise artifact registry supporting 45+ package formats.  ## Authentication  The JSON management API under `/api/v1/_*` accepts **API tokens only as `Authorization: Bearer <token>`**. This is the canonical scheme for programmatic access; JWTs issued by the login flow also use `Bearer`. HTTP Basic credentials on `/api/v1/_*` are validated *only* as a real `username:password` login — the password half is **not** retried as an API token. A request to `/api/v1/_*` that sends an API token in the password field of Basic auth therefore returns `401 AUTH_ERROR`; switch to `Authorization: Bearer <token>`.  Format (package-manager) endpoints such as `/v2/_*` (OCI), `/incus/_*`, `/debian/_*`, and the language registries are intentionally more permissive for client compatibility: in addition to Bearer, they accept HTTP **Basic** auth with the API token supplied in the *password* field (any username), matching the `pip` netrc / Artifactory-style `token:<api_token>` convention used by package managers that cannot send a Bearer header. This Basic-with-token fallback applies to format endpoints only, never to `/api/v1/_*`.
 *
 * The version of the OpenAPI document: 1.4.2
 * 
 * Generated by: https://openapi-generator.tech
 */

use crate::models;
use serde::{Deserialize, Serialize};

#[derive(Clone, Default, Debug, PartialEq, Serialize, Deserialize)]
pub struct CreateTokenRequest {
    #[serde(rename = "description", default, with = "::serde_with::rust::double_option", skip_serializing_if = "Option::is_none")]
    pub description: Option<Option<String>>,
    #[serde(rename = "expires_in_days", default, with = "::serde_with::rust::double_option", skip_serializing_if = "Option::is_none")]
    pub expires_in_days: Option<Option<i64>>,
    #[serde(rename = "name")]
    pub name: String,
    /// Dynamic repository selector (match by labels, formats, name pattern). Mutually exclusive with `repository_ids`. When set, matched repos are resolved at auth time so new repos that match the selector are picked up automatically.
    #[serde(rename = "repo_selector", default, with = "::serde_with::rust::double_option", skip_serializing_if = "Option::is_none")]
    pub repo_selector: Option<Option<serde_json::Value>>,
    /// Explicit repository IDs to restrict access to. Mutually exclusive with `repo_selector`.
    #[serde(rename = "repository_ids", default, with = "::serde_with::rust::double_option", skip_serializing_if = "Option::is_none")]
    pub repository_ids: Option<Option<Vec<uuid::Uuid>>>,
    #[serde(rename = "scopes")]
    pub scopes: Vec<String>,
}

impl CreateTokenRequest {
    pub fn new(name: String, scopes: Vec<String>) -> CreateTokenRequest {
        CreateTokenRequest {
            description: None,
            expires_in_days: None,
            name,
            repo_selector: None,
            repository_ids: None,
            scopes,
        }
    }
}

