mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
3ca438e3d5
Mutual TLS helps prevent untrusted clients communicating with services like Authelia. This can be utilized to reduce the attack surface. Fixes #3041
65 lines
1.6 KiB
Go
65 lines
1.6 KiB
Go
package server
|
|
|
|
const (
|
|
embeddedAssets = "public_html/"
|
|
swaggerAssets = embeddedAssets + "api/"
|
|
apiFile = "openapi.yml"
|
|
indexFile = "index.html"
|
|
logoFile = "logo.png"
|
|
)
|
|
|
|
var (
|
|
rootFiles = []string{"manifest.json", "robots.txt"}
|
|
swaggerFiles = []string{
|
|
"favicon-16x16.png",
|
|
"favicon-32x32.png",
|
|
"index.css",
|
|
"oauth2-redirect.html",
|
|
"swagger-initializer.js",
|
|
"swagger-ui-bundle.js",
|
|
"swagger-ui-bundle.js.map",
|
|
"swagger-ui-es-bundle-core.js",
|
|
"swagger-ui-es-bundle-core.js.map",
|
|
"swagger-ui-es-bundle.js",
|
|
"swagger-ui-es-bundle.js.map",
|
|
"swagger-ui-standalone-preset.js",
|
|
"swagger-ui-standalone-preset.js.map",
|
|
"swagger-ui.css",
|
|
"swagger-ui.css.map",
|
|
"swagger-ui.js",
|
|
"swagger-ui.js.map",
|
|
}
|
|
|
|
// Directories excluded from the not found handler proceeding to the next() handler.
|
|
httpServerDirs = []struct {
|
|
name, prefix string
|
|
}{
|
|
{name: "/api", prefix: "/api/"},
|
|
{name: "/.well-known", prefix: "/.well-known/"},
|
|
{name: "/static", prefix: "/static/"},
|
|
}
|
|
)
|
|
|
|
const schemeHTTP = "http"
|
|
const schemeHTTPS = "https"
|
|
|
|
const (
|
|
dev = "dev"
|
|
f = "false"
|
|
t = "true"
|
|
)
|
|
|
|
const healthCheckEnv = `# Written by Authelia Process
|
|
X_AUTHELIA_HEALTHCHECK=1
|
|
X_AUTHELIA_HEALTHCHECK_SCHEME=%s
|
|
X_AUTHELIA_HEALTHCHECK_HOST=%s
|
|
X_AUTHELIA_HEALTHCHECK_PORT=%d
|
|
X_AUTHELIA_HEALTHCHECK_PATH=%s
|
|
`
|
|
|
|
const (
|
|
cspDefaultTemplate = "default-src 'self'; object-src 'none'; style-src 'self' 'nonce-%s'"
|
|
cspDefaultDevTemplate = "default-src 'self' 'unsafe-eval'; object-src 'none'; style-src 'self' 'nonce-%s'"
|
|
cspNoncePlaceholder = "${NONCE}"
|
|
)
|