namespace ZB.MOM.WW.OtOpcUa.Host.Configuration
{
    /// <summary>
    ///     Authentication and role-based access control settings for the OPC UA server.
    /// </summary>
    public class AuthenticationConfiguration
    {
        /// <summary>
        ///     Gets or sets a value indicating whether anonymous OPC UA connections are accepted.
        /// </summary>
        public bool AllowAnonymous { get; set; } = true;

        /// <summary>
        ///     Gets or sets a value indicating whether anonymous users can write tag values.
        ///     When false, only authenticated users can write. Existing security classification restrictions still apply.
        /// </summary>
        public bool AnonymousCanWrite { get; set; } = true;

        /// <summary>
        ///     Gets or sets the LDAP authentication settings. When Ldap.Enabled is true,
        ///     credentials are validated against the LDAP server and group membership determines permissions.
        /// </summary>
        public LdapConfiguration Ldap { get; set; } = new();
    }
}