---
credentials:
  app_key:
    description: "Generic 32-byte base64 key with base64: prefix"
    algorithm: base64_prefixed_32
    validation: ^base64:[A-Za-z0-9+/]{43}=$
  mcp_bearer:
    description: "Bearer an MCP client must present to this role's adapter instance. Distinct from the upstream credential the adapter presents, because authenticating
      to the application says nothing about who called the adapter."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 48
  sso_proxy_secret:
    description: "Shared secret the reverse proxy sends with every request; Apache in the Snipe-IT container only turns the trusted identity header into the login
      variable when it matches."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 48