{
    "$schema": "http://json-schema.org/draft-04/schema#",
    "description": "",
    "type": "object",
    "properties": {
      "auth_mode": {
        "type": "string",
        "pattern": "^(oauth|local|both)$"
      },
      "oauth_provider": {
        "type": "string",
        "pattern": "^(google|github)?$"
      },
      "oauth_client_id": {
        "type": "string",
        "minLength": 0
      },
      "oauth_client_secret": {
        "type": "string",
        "minLength": 0
      },
      "oauth_redirect_uri": {
        "type": "string",
        "minLength": 0
      },
      "oauth_username_from": {
        "type": "string",
        "pattern": "^(sub|email|preffered_username|login|name)$"
      },
      "oauth_allowed_emails": {
        "type": "array",
        "items": {
          "required": [],
          "properties": {}
        }
      },
      "oauth_permissions": {
        "type": "object",
        "description": "Map of permission keys to principal emails (or local usernames). Key * grants all permissions.",
        "properties": {
          "*": {
            "type": "array",
            "items": { "type": "string" }
          },
          "pgw.addprojects": {
            "type": "array",
            "items": { "type": "string" }
          },
          "pgw.settings": {
            "type": "array",
            "items": { "type": "string" }
          }
        },
        "additionalProperties": {
          "type": "array",
          "items": { "type": "string" },
          "description": "Scoped keys: pgw.boards.{scope}, pgw.tasks.{scope}, pgw.comments.{scope}, pgw.hooks.{scope}, pgw.mr.create.{scope}, pgw.mr.merge.{scope} (fnmatch on project path)"
        }
      },
      "local_users": {
        "type": "array",
        "uniqueItems": true,
        "minItems": 1,
        "items": {
          "required": [
            "user",
            "pass"
          ],
          "properties": {
            "user": {
              "type": "string",
              "minLength": 2
            },
            "pass": {
              "type": "string",
              "minLength": 8
            }
          }
        }
      }
    },
    "required": [
      "auth_mode"
    ]
  }