mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
255aaeb2ad
Adds encryption to the U2F public keys. While the public keys cannot be used to authenticate, only to validate someone is authenticated, if a rogue operator changed these in the database they may be able to bypass 2FA. This prevents that.
102 lines
2.0 KiB
Go
102 lines
2.0 KiB
Go
package models
|
|
|
|
import (
|
|
"database/sql/driver"
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
)
|
|
|
|
// NewIP easily constructs a new IP.
|
|
func NewIP(value net.IP) (ip IP) {
|
|
return IP{IP: value}
|
|
}
|
|
|
|
// NewNullIP easily constructs a new NullIP.
|
|
func NewNullIP(value net.IP) (ip NullIP) {
|
|
return NullIP{IP: value}
|
|
}
|
|
|
|
// NewNullIPFromString easily constructs a new NullIP from a string.
|
|
func NewNullIPFromString(value string) (ip NullIP) {
|
|
if value == "" {
|
|
return ip
|
|
}
|
|
|
|
return NullIP{IP: net.ParseIP(value)}
|
|
}
|
|
|
|
// IP is a type specific for storage of a net.IP in the database which can't be NULL.
|
|
type IP struct {
|
|
IP net.IP
|
|
}
|
|
|
|
// Value is the IP implementation of the databases/sql driver.Valuer.
|
|
func (ip IP) Value() (value driver.Value, err error) {
|
|
if ip.IP == nil {
|
|
return nil, errors.New("cannot value nil IP to driver.Value")
|
|
}
|
|
|
|
return driver.Value(ip.IP.String()), nil
|
|
}
|
|
|
|
// Scan is the IP implementation of the sql.Scanner.
|
|
func (ip *IP) Scan(src interface{}) (err error) {
|
|
if src == nil {
|
|
return errors.New("cannot scan nil to type IP")
|
|
}
|
|
|
|
var value string
|
|
|
|
switch v := src.(type) {
|
|
case string:
|
|
value = v
|
|
default:
|
|
return fmt.Errorf("invalid type %T for IP %v", src, src)
|
|
}
|
|
|
|
ip.IP = net.ParseIP(value)
|
|
|
|
return nil
|
|
}
|
|
|
|
// NullIP is a type specific for storage of a net.IP in the database which can also be NULL.
|
|
type NullIP struct {
|
|
IP net.IP
|
|
}
|
|
|
|
// Value is the NullIP implementation of the databases/sql driver.Valuer.
|
|
func (ip NullIP) Value() (value driver.Value, err error) {
|
|
if ip.IP == nil {
|
|
return driver.Value(nil), nil
|
|
}
|
|
|
|
return driver.Value(ip.IP.String()), nil
|
|
}
|
|
|
|
// Scan is the NullIP implementation of the sql.Scanner.
|
|
func (ip *NullIP) Scan(src interface{}) (err error) {
|
|
if src == nil {
|
|
ip.IP = nil
|
|
return nil
|
|
}
|
|
|
|
var value string
|
|
|
|
switch v := src.(type) {
|
|
case string:
|
|
value = v
|
|
default:
|
|
return fmt.Errorf("invalid type %T for NullIP %v", src, src)
|
|
}
|
|
|
|
ip.IP = net.ParseIP(value)
|
|
|
|
return nil
|
|
}
|
|
|
|
// StartupCheck represents a provider that has a startup check.
|
|
type StartupCheck interface {
|
|
StartupCheck() (err error)
|
|
}
|