variables.tf

variable "auth_vendor" {
  type        = string
  description = "The vendor to use for authorisation (google, microsoft, github, okta, auth0, centrify)"
}

variable "cloudfront_distribution" {
  type        = string
  description = "The cloudfront distribtion"
}

variable "client_id" {
  type        = string
  description = "The authorisation client id"
}

variable "client_secret" {
  type        = string
  description = "The authorisation client secret"
  sensitive   = true
}

variable "redirect_uri" {
  type        = string
  description = "The redirect uri "
}

variable "hd" {
  type        = string
  description = "The hosted domain (google only)"
  default     = null
}

variable "session_duration" {
  type        = number
  default     = 1
  description = "Session duration in hours"
}

variable "authz" {
  type        = string
  default     = "1"
  description = "The authorisation method (google, microsoft only). Mirosoft: (1) Azure AD Login (default)\n   (2) JSON Username Lookup\n\n Google: (1) Hosted Domain - verify email's domain matches that of the given hosted domain\n   (2) HTTP Email Lookup - verify email exists in JSON array located at given HTTP endpoint\n   (3) Google Groups Lookup - verify email exists in one of given Google Groups"
}

variable "github_organization" {
  type        = string
  default     = null
  description = "The GitHub organization. Required for GitHub auth vendor only"
}

variable "bucket_name" {
  type        = string
  description = "The name of your s3 bucket"
}

variable "tags" {
  type        = map(string)
  default     = {}
  description = "Tags to label resources with (e.g map('dev', 'prod'))"
}

variable "region" {
  type        = string
  description = "The region to deploy the S3 bucket into"
}

variable "cloudfront_aliases" {
  type        = list(string)
  default     = []
  description = "List of FQDNs to be used as alternative domain names (CNAMES) for Cloudfront"
}

variable "cloudfront_price_class" {
  type        = string
  default     = "PriceClass_All"
  description = "Cloudfront price class; for example: 'PriceClass_All', 'PriceClass_200', 'PriceClass_100'"

  validation {
    condition     = can(regex("^PriceClass_", var.cloudfront_price_class))
    error_message = "The cloudfront_price_class value must start with \"PriceClass_\"."
  }
}

variable "cloudfront_default_root_object" {
  type        = string
  default     = "index.html"
  description = "The default root object of the Cloudfront distribution"
}

variable "cloudfront_acm_certificate_arn" {
  description = "ACM Certificate ARN for Cloudfront"
  default     = null
}