mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
a44f0cf959
* fix: redis sentinel secret missing * refactor: use consts for authentication_backend.file.password errs * fix: unit test for new default port * test: cover additional misses * test: fix windows/linux specific test error * test: more windows specific tests * test: remove superfluous url.IsAbs * test: validator 100% coverage
84 lines
2.7 KiB
Go
84 lines
2.7 KiB
Go
package validator
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"strings"
|
|
|
|
"github.com/spf13/viper"
|
|
|
|
"github.com/authelia/authelia/internal/configuration/schema"
|
|
)
|
|
|
|
// SecretNameToEnvName converts a secret name into the env name.
|
|
func SecretNameToEnvName(secretName string) (envName string) {
|
|
return "authelia." + secretName + ".file"
|
|
}
|
|
|
|
func isSecretKey(value string) (isSecretKey bool) {
|
|
for _, secretKey := range SecretNames {
|
|
if value == secretKey || value == SecretNameToEnvName(secretKey) {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// ValidateSecrets checks that secrets are either specified by config file/env or by file references.
|
|
func ValidateSecrets(configuration *schema.Configuration, validator *schema.StructValidator, viper *viper.Viper) {
|
|
configuration.JWTSecret = getSecretValue(SecretNames["JWTSecret"], validator, viper)
|
|
configuration.Session.Secret = getSecretValue(SecretNames["SessionSecret"], validator, viper)
|
|
|
|
if configuration.DuoAPI != nil {
|
|
configuration.DuoAPI.SecretKey = getSecretValue(SecretNames["DUOSecretKey"], validator, viper)
|
|
}
|
|
|
|
if configuration.Session.Redis != nil {
|
|
configuration.Session.Redis.Password = getSecretValue(SecretNames["RedisPassword"], validator, viper)
|
|
|
|
if configuration.Session.Redis.HighAvailability != nil {
|
|
configuration.Session.Redis.HighAvailability.SentinelPassword =
|
|
getSecretValue(SecretNames["RedisSentinelPassword"], validator, viper)
|
|
}
|
|
}
|
|
|
|
if configuration.AuthenticationBackend.Ldap != nil {
|
|
configuration.AuthenticationBackend.Ldap.Password = getSecretValue(SecretNames["LDAPPassword"], validator, viper)
|
|
}
|
|
|
|
if configuration.Notifier != nil && configuration.Notifier.SMTP != nil {
|
|
configuration.Notifier.SMTP.Password = getSecretValue(SecretNames["SMTPPassword"], validator, viper)
|
|
}
|
|
|
|
if configuration.Storage.MySQL != nil {
|
|
configuration.Storage.MySQL.Password = getSecretValue(SecretNames["MySQLPassword"], validator, viper)
|
|
}
|
|
|
|
if configuration.Storage.PostgreSQL != nil {
|
|
configuration.Storage.PostgreSQL.Password = getSecretValue(SecretNames["PostgreSQLPassword"], validator, viper)
|
|
}
|
|
}
|
|
|
|
func getSecretValue(name string, validator *schema.StructValidator, viper *viper.Viper) string {
|
|
configValue := viper.GetString(name)
|
|
fileEnvValue := viper.GetString(SecretNameToEnvName(name))
|
|
|
|
// Error Checking.
|
|
if fileEnvValue != "" && configValue != "" {
|
|
validator.Push(fmt.Errorf("error loading secret (%s): it's already defined in the config file", name))
|
|
}
|
|
|
|
// Derive Secret.
|
|
if fileEnvValue != "" {
|
|
content, err := ioutil.ReadFile(fileEnvValue)
|
|
if err != nil {
|
|
validator.Push(fmt.Errorf("error loading secret file (%s): %s", name, err))
|
|
} else {
|
|
return strings.ReplaceAll(string(content), "\n", "")
|
|
}
|
|
}
|
|
|
|
return configValue
|
|
}
|