class profile::puppetserver::authority (

  String "$jwt_secret" = 'undef',
  String $loglevel   = 'info',
  Integer "$validity"  = '0',
  String $ensure     = 'latest',
  Hash $config       = {},
  Hash $jwt_token    = {},
) {
  ini_setting { 'policy-based autosigning':
    setting => 'autosign',
    path    => "${settings::confdir}/puppet.conf",
    section => 'master',
    value   => '/opt/puppetlabs/puppet/bin/autosign-validator',
    notify  => Service['pe-puppetserver'],
  }

  class { '::autosign':
    ensure => $ensure,
    config => {
      general => {
        loglevel => $loglevel,
      },
      jwt_token => {
        secret   => "$jwt_secret",
        validity => "$validity",
      }
    },
  }
}