mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
8aade7f40e
* added regulation validator * made regulations find_time and ban_time values duration notation strings * added DefaultRegulationConfiguration for the validator * made session expiration and inactivity values duration notation strings * TOTP period does not need to be converted because adjustment should be discouraged * moved TOTP defaults to DefaultTOTPConfiguration and removed the consts * arranged the root config validator in configuration file order * adjusted tests for the changes * moved duration notation docs to root of configuration * added references to duration notation where applicable * project wide gofmt and goimports: * run gofmt * run goimports -local github.com/authelia/authelia -w on all files * Make jwt_secret error uniform and add tests * now at 100% coverage for internal/configuration/validator/configuration.go
70 lines
1.9 KiB
Go
70 lines
1.9 KiB
Go
package validator
|
|
|
|
import (
|
|
"fmt"
|
|
"net/url"
|
|
|
|
"github.com/authelia/authelia/internal/configuration/schema"
|
|
)
|
|
|
|
var defaultPort = 8080
|
|
var defaultLogLevel = "info"
|
|
|
|
// Validate and adapt the configuration read from file.
|
|
func Validate(configuration *schema.Configuration, validator *schema.StructValidator) {
|
|
if configuration.Host == "" {
|
|
configuration.Host = "0.0.0.0"
|
|
}
|
|
|
|
if configuration.Port == 0 {
|
|
configuration.Port = defaultPort
|
|
}
|
|
|
|
if configuration.TLSKey != "" && configuration.TLSCert == "" {
|
|
validator.Push(fmt.Errorf("No TLS certificate provided, please check the \"tls_cert\" which has been configured"))
|
|
} else if configuration.TLSKey == "" && configuration.TLSCert != "" {
|
|
validator.Push(fmt.Errorf("No TLS key provided, please check the \"tls_key\" which has been configured"))
|
|
}
|
|
|
|
if configuration.LogLevel == "" {
|
|
configuration.LogLevel = defaultLogLevel
|
|
}
|
|
|
|
if configuration.JWTSecret == "" {
|
|
validator.Push(fmt.Errorf("Provide a JWT secret using \"jwt_secret\" key"))
|
|
}
|
|
|
|
if configuration.DefaultRedirectionURL != "" {
|
|
_, err := url.ParseRequestURI(configuration.DefaultRedirectionURL)
|
|
if err != nil {
|
|
validator.Push(fmt.Errorf("Unable to parse default redirection url"))
|
|
}
|
|
}
|
|
|
|
if configuration.TOTP == nil {
|
|
configuration.TOTP = &schema.TOTPConfiguration{}
|
|
}
|
|
ValidateTOTP(configuration.TOTP, validator)
|
|
|
|
ValidateAuthenticationBackend(&configuration.AuthenticationBackend, validator)
|
|
|
|
if configuration.AccessControl.DefaultPolicy == "" {
|
|
configuration.AccessControl.DefaultPolicy = "deny"
|
|
}
|
|
|
|
ValidateSession(&configuration.Session, validator)
|
|
|
|
if configuration.Regulation == nil {
|
|
configuration.Regulation = &schema.RegulationConfiguration{}
|
|
}
|
|
ValidateRegulation(configuration.Regulation, validator)
|
|
|
|
ValidateStorage(configuration.Storage, validator)
|
|
|
|
if configuration.Notifier == nil {
|
|
validator.Push(fmt.Errorf("A notifier configuration must be provided"))
|
|
} else {
|
|
ValidateNotifier(configuration.Notifier, validator)
|
|
}
|
|
}
|