mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
7efcac6017
This adjusts the session ID generator making it use it's own random function rather than using one from the utils lib. This allows us to utilize crypto/rand or math/rand interchangeably. Additionally refactor the utils.RandomString func.
177 lines
4.8 KiB
Go
177 lines
4.8 KiB
Go
package utils
|
|
|
|
import (
|
|
crand "crypto/rand"
|
|
"fmt"
|
|
"math/rand"
|
|
"net/url"
|
|
"strings"
|
|
"time"
|
|
"unicode"
|
|
)
|
|
|
|
// IsStringAbsURL checks a string can be parsed as a URL and that is IsAbs and if it can't it returns an error
|
|
// describing why.
|
|
func IsStringAbsURL(input string) (err error) {
|
|
parsedURL, err := url.Parse(input)
|
|
if err != nil {
|
|
return fmt.Errorf("could not parse '%s' as a URL", input)
|
|
}
|
|
|
|
if !parsedURL.IsAbs() {
|
|
return fmt.Errorf("the url '%s' is not absolute because it doesn't start with a scheme like 'http://' or 'https://'", input)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// IsStringAlphaNumeric returns false if any rune in the string is not alpha-numeric.
|
|
func IsStringAlphaNumeric(input string) bool {
|
|
for _, r := range input {
|
|
if !unicode.IsLetter(r) && !unicode.IsNumber(r) {
|
|
return false
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|
|
|
|
// IsStringInSlice checks if a single string is in a slice of strings.
|
|
func IsStringInSlice(needle string, haystack []string) (inSlice bool) {
|
|
for _, b := range haystack {
|
|
if b == needle {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// IsStringInSliceSuffix checks if the needle string has one of the suffixes in the haystack.
|
|
func IsStringInSliceSuffix(needle string, haystack []string) (hasSuffix bool) {
|
|
for _, straw := range haystack {
|
|
if strings.HasSuffix(needle, straw) {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// IsStringInSliceFold checks if a single string is in a slice of strings but uses strings.EqualFold to compare them.
|
|
func IsStringInSliceFold(needle string, haystack []string) (inSlice bool) {
|
|
for _, b := range haystack {
|
|
if strings.EqualFold(b, needle) {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// IsStringInSliceContains checks if a single string is in an array of strings.
|
|
func IsStringInSliceContains(needle string, haystack []string) (inSlice bool) {
|
|
for _, b := range haystack {
|
|
if strings.Contains(needle, b) {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// SliceString splits a string s into an array with each item being a max of int d
|
|
// d = denominator, n = numerator, q = quotient, r = remainder.
|
|
func SliceString(s string, d int) (array []string) {
|
|
n := len(s)
|
|
q := n / d
|
|
r := n % d
|
|
|
|
for i := 0; i < q; i++ {
|
|
array = append(array, s[i*d:i*d+d])
|
|
if i+1 == q && r != 0 {
|
|
array = append(array, s[i*d+d:])
|
|
}
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
func isStringSlicesDifferent(a, b []string, method func(s string, b []string) bool) (different bool) {
|
|
if len(a) != len(b) {
|
|
return true
|
|
}
|
|
|
|
for _, s := range a {
|
|
if !method(s, b) {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// IsStringSlicesDifferent checks two slices of strings and on the first occurrence of a string item not existing in the
|
|
// other slice returns true, otherwise returns false.
|
|
func IsStringSlicesDifferent(a, b []string) (different bool) {
|
|
return isStringSlicesDifferent(a, b, IsStringInSlice)
|
|
}
|
|
|
|
// IsStringSlicesDifferentFold checks two slices of strings and on the first occurrence of a string item not existing in
|
|
// the other slice (case insensitive) returns true, otherwise returns false.
|
|
func IsStringSlicesDifferentFold(a, b []string) (different bool) {
|
|
return isStringSlicesDifferent(a, b, IsStringInSliceFold)
|
|
}
|
|
|
|
// StringSlicesDelta takes a before and after []string and compares them returning a added and removed []string.
|
|
func StringSlicesDelta(before, after []string) (added, removed []string) {
|
|
for _, s := range before {
|
|
if !IsStringInSlice(s, after) {
|
|
removed = append(removed, s)
|
|
}
|
|
}
|
|
|
|
for _, s := range after {
|
|
if !IsStringInSlice(s, before) {
|
|
added = append(added, s)
|
|
}
|
|
}
|
|
|
|
return added, removed
|
|
}
|
|
|
|
// RandomString returns a random string with a given length with values from the provided characters. When crypto is set
|
|
// to false we use math/rand and when it's set to true we use crypto/rand. The crypto option should always be set to true
|
|
// excluding when the task is time sensitive and would not benefit from extra randomness.
|
|
func RandomString(n int, characters string, crypto bool) (randomString string) {
|
|
return string(RandomBytes(n, characters, crypto))
|
|
}
|
|
|
|
// RandomBytes returns a random []byte with a given length with values from the provided characters. When crypto is set
|
|
// to false we use math/rand and when it's set to true we use crypto/rand. The crypto option should always be set to true
|
|
// excluding when the task is time sensitive and would not benefit from extra randomness.
|
|
func RandomBytes(n int, characters string, crypto bool) (bytes []byte) {
|
|
bytes = make([]byte, n)
|
|
|
|
if crypto {
|
|
_, _ = crand.Read(bytes)
|
|
} else {
|
|
_, _ = rand.Read(bytes) //nolint:gosec // As this is an option when using this function it's not necessary to be concerned about this.
|
|
}
|
|
|
|
for i, b := range bytes {
|
|
bytes[i] = characters[b%byte(len(characters))]
|
|
}
|
|
|
|
return bytes
|
|
}
|
|
|
|
// StringHTMLEscape escapes chars for a HTML body.
|
|
func StringHTMLEscape(input string) (output string) {
|
|
return htmlEscaper.Replace(input)
|
|
}
|
|
|
|
func init() {
|
|
rand.Seed(time.Now().UnixNano())
|
|
}
|