namespace ZB.MOM.WW.OtOpcUa.Host.Configuration
{
    /// <summary>
    ///     LDAP authentication and group-to-role mapping settings.
    /// </summary>
    public class LdapConfiguration
    {
        /// <summary>
        ///     Gets or sets whether LDAP authentication is enabled.
        ///     When true, user credentials are validated against the configured LDAP server
        ///     and group membership determines OPC UA permissions.
        /// </summary>
        public bool Enabled { get; set; } = false;

        /// <summary>
        ///     Gets or sets the LDAP server hostname or IP address.
        /// </summary>
        public string Host { get; set; } = "localhost";

        /// <summary>
        ///     Gets or sets the LDAP server port.
        /// </summary>
        public int Port { get; set; } = 3893;

        /// <summary>
        ///     Gets or sets the base DN for LDAP operations.
        /// </summary>
        public string BaseDN { get; set; } = "dc=lmxopcua,dc=local";

        /// <summary>
        ///     Gets or sets the bind DN template. Use {username} as a placeholder.
        /// </summary>
        public string BindDnTemplate { get; set; } = "cn={username},dc=lmxopcua,dc=local";

        /// <summary>
        ///     Gets or sets the service account DN used for LDAP searches (group lookups).
        /// </summary>
        public string ServiceAccountDn { get; set; } = "";

        /// <summary>
        ///     Gets or sets the service account password.
        /// </summary>
        public string ServiceAccountPassword { get; set; } = "";

        /// <summary>
        ///     Gets or sets the LDAP connection timeout in seconds.
        /// </summary>
        public int TimeoutSeconds { get; set; } = 5;

        /// <summary>
        ///     Gets or sets the LDAP group name that grants read-only access.
        /// </summary>
        public string ReadOnlyGroup { get; set; } = "ReadOnly";

        /// <summary>
        ///     Gets or sets the LDAP group name that grants write access for FreeAccess/Operate attributes.
        /// </summary>
        public string WriteOperateGroup { get; set; } = "WriteOperate";

        /// <summary>
        ///     Gets or sets the LDAP group name that grants write access for Tune attributes.
        /// </summary>
        public string WriteTuneGroup { get; set; } = "WriteTune";

        /// <summary>
        ///     Gets or sets the LDAP group name that grants write access for Configure attributes.
        /// </summary>
        public string WriteConfigureGroup { get; set; } = "WriteConfigure";

        /// <summary>
        ///     Gets or sets the LDAP group name that grants alarm acknowledgment access.
        /// </summary>
        public string AlarmAckGroup { get; set; } = "AlarmAck";
    }
}