_format_version: "3.0"
_transform: true



services:
  - name: fastapi-svc
    host: fastapi
    port: 8000
    protocol: http

routes:
  - name: api-root
    paths: ["/api/"]
    strip_path: true
    methods: ["GET", "POST", "PUT", "PATCH", "DELETE"]
    plugins:
      - name: request-transformer
        config:
          add:
            headers:
              - "X-Forwarded-User: "
              - "X-Forwarded-Email: "
          remove:
            headers:
              - "Authorization"

  - name: debug-api
    url: http://fastapi:8000


  # - name: openid
  #   config:
  #     issuer: "https://kc.kellsupport.com/realms/cmmc"
  #     client_id: "kong-gateway"
  #     client_secret: "3FefJAfN7Rox2x7EW7JzZ38vLI04cXMB"
  #     redirect_uri: "https://api.kellsupport.com/api/"
  #     scopes: ["openid", "profile", "email"]
  #     bearer_only: false
  #     response_type: "code"
  #     session_secret: "3b4b1b8c8366b1d7c50c49742f879bdd20b85d5b95adaaf4af38d89a36c372ab"
  #     ssl_verify: false
  #     timeout: 10000

  - name: cors
    config:
      origins: ["*"]
      methods: ["GET", "POST", "PUT", "PATCH", "DELETE"]
      headers: ["Accept", "Content-Type", "Authorization"]
      credentials: true
      max_age: 3600

  - name: api-debug-auth  
    paths: ["/api/debug-auth"]
    strip_path: true
    methods: ["GET"]

  - name: gateway-health
    paths: ["/gateway-health"]
    strip_path: true
    methods: ["GET"]

  - name: healthz
    paths: ["/healthz"]
    strip_path: true
    methods: ["GET"]

  - name: debug-auth
    paths: ["/api/debug-auth"]
    strip_path: true
    service: ["debug-api"]

plugins:
  - name: rate-limiting
    config:
      second: 25
      policy: local