mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
3c81e75d79
This adds an access-control command that checks the policy enforcement for a given criteria using a configuration file and refactors the configuration validation command to include all configuration sources.
76 lines
2.5 KiB
Go
76 lines
2.5 KiB
Go
package validator
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/authelia/authelia/v4/internal/configuration/schema"
|
|
"github.com/authelia/authelia/v4/internal/utils"
|
|
)
|
|
|
|
// ValidateStorage validates storage configuration.
|
|
func ValidateStorage(config schema.StorageConfiguration, validator *schema.StructValidator) {
|
|
if config.Local == nil && config.MySQL == nil && config.PostgreSQL == nil {
|
|
validator.Push(errors.New(errStrStorage))
|
|
}
|
|
|
|
switch {
|
|
case config.MySQL != nil:
|
|
validateSQLConfiguration(&config.MySQL.SQLStorageConfiguration, validator, "mysql")
|
|
case config.PostgreSQL != nil:
|
|
validatePostgreSQLConfiguration(config.PostgreSQL, validator)
|
|
case config.Local != nil:
|
|
validateLocalStorageConfiguration(config.Local, validator)
|
|
}
|
|
|
|
if config.EncryptionKey == "" {
|
|
validator.Push(errors.New(errStrStorageEncryptionKeyMustBeProvided))
|
|
} else if len(config.EncryptionKey) < 20 {
|
|
validator.Push(errors.New(errStrStorageEncryptionKeyTooShort))
|
|
}
|
|
}
|
|
|
|
func validateSQLConfiguration(config *schema.SQLStorageConfiguration, validator *schema.StructValidator, provider string) {
|
|
if config.Timeout == 0 {
|
|
config.Timeout = schema.DefaultSQLStorageConfiguration.Timeout
|
|
}
|
|
|
|
if config.Host == "" {
|
|
validator.Push(fmt.Errorf(errFmtStorageOptionMustBeProvided, provider, "host"))
|
|
}
|
|
|
|
if config.Username == "" || config.Password == "" {
|
|
validator.Push(fmt.Errorf(errFmtStorageUserPassMustBeProvided, provider))
|
|
}
|
|
|
|
if config.Database == "" {
|
|
validator.Push(fmt.Errorf(errFmtStorageOptionMustBeProvided, provider, "database"))
|
|
}
|
|
}
|
|
|
|
func validatePostgreSQLConfiguration(config *schema.PostgreSQLStorageConfiguration, validator *schema.StructValidator) {
|
|
validateSQLConfiguration(&config.SQLStorageConfiguration, validator, "postgres")
|
|
|
|
if config.Schema == "" {
|
|
config.Schema = schema.DefaultPostgreSQLStorageConfiguration.Schema
|
|
}
|
|
|
|
// Deprecated. TODO: Remove in v4.36.0.
|
|
if config.SSLMode != "" && config.SSL.Mode == "" {
|
|
config.SSL.Mode = config.SSLMode
|
|
}
|
|
|
|
if config.SSL.Mode == "" {
|
|
config.SSL.Mode = schema.DefaultPostgreSQLStorageConfiguration.SSL.Mode
|
|
} else if !utils.IsStringInSlice(config.SSL.Mode, validStoragePostgreSQLSSLModes) {
|
|
validator.Push(fmt.Errorf(errFmtStoragePostgreSQLInvalidSSLMode, strings.Join(validStoragePostgreSQLSSLModes, "', '"), config.SSL.Mode))
|
|
}
|
|
}
|
|
|
|
func validateLocalStorageConfiguration(config *schema.LocalStorageConfiguration, validator *schema.StructValidator) {
|
|
if config.Path == "" {
|
|
validator.Push(fmt.Errorf(errFmtStorageOptionMustBeProvided, "local", "path"))
|
|
}
|
|
}
|