<?xml version="1.0" encoding="UTF-8"?>
<config-description:config-descriptions
	xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
	xmlns:config-description="https://openhab.org/schemas/config-description/v1.0.0"
	xsi:schemaLocation="https://openhab.org/schemas/config-description/v1.0.0 https://openhab.org/schemas/config-description-1.0.0.xsd">

	<config-description uri="system:restauth">
		<parameter name="implicitUserRole" type="boolean">
			<label>Implicit User Role</label>
			<description>By default, operations requiring the "user" role are available when unauthenticated. Disabling this
				option will enforce authorization for these operations. Warning: This causes clients that do not support
				authentication to break.</description>
			<default>true</default>
		</parameter>
		<parameter name="trustedNetworks" type="text">
			<advanced>true</advanced>
			<label>Trusted Networks</label>
			<description>Grant implicit user role to requests originating from these networks; Comma separated list of CIDR
				(ignored if "Implicit User Role" is enabled).</description>
		</parameter>
		<parameter name="allowBasicAuth" type="boolean">
			<advanced>true</advanced>
			<label>Allow Basic Authentication</label>
			<description>Allow the use of Basic authentication to access protected API resources, in addition to access tokens
				and API tokens.</description>
			<default>false</default>
		</parameter>
		<parameter name="cacheExpiration" type="integer" min="0" step="1" unit="h">
			<advanced>true</advanced>
			<label>Cache Expiration Time</label>
			<description>When basic authentication is activated, credentials are put in a cache in order to speed up request
				authorization. The entries in the cache expire after a while in order to not keep credentials in memory
				indefinitely. This value defines the expiration time in hours. Set it to 0 for disabling the cache.</description>
			<default>6</default>
		</parameter>
	</config-description>

</config-description:config-descriptions>
