mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
626f5d2949
* [FEATURE] Remember Me Configuration * allow users to specify the duration of remember me using remember_me_duration in session config * setting the duration to 0 disables remember me * only render the remember me element if remember me is enabled * prevent malicious users from faking remember me functionality in the backend * add string to duration helper called ParseDurationString to parse a string into a duration * added tests to the helper function * use the SessionProvider to store the time.Duration instead of parsing it over and over again * add sec doc, adjust month/min, consistency * renamed internal/utils/constants.go to internal/utils/const.go to be consistent * added security measure docs * adjusted default remember me duration to be 1 month instead of 1 year * utilize default remember me duration in the autheliaCtx mock * adjust order of keys in session configuration examples * add notes on session security measures secret only being redis * add TODO items for duration notation for both Expiration and Inactivity (will be removed soon) * fix error text for Inactivity in the validator * add session validator tests * deref check bodyJSON.KeepMeLoggedIn and derive the value based on conf and user input and store it (DRY) * remove unnecessary regex for the simplified ParseDurationString utility * ParseDurationString only accepts decimals without leading zeros now * comprehensively test all unit types * remove unnecessary type unions in web * add test to check sanity of time duration consts, this is just so they can't be accidentally changed * simplify deref check and assignment * fix reset password padding/margins * adjust some doc wording * adjust the handler configuration suite test * actually run the handler configuration suite test (whoops) * reduce the number of regex's used by ParseDurationString to 1, thanks to Clement * adjust some error wording
69 lines
2.0 KiB
Go
69 lines
2.0 KiB
Go
package session
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/valyala/fasthttp"
|
|
|
|
"github.com/authelia/authelia/internal/configuration/schema"
|
|
"github.com/fasthttp/session"
|
|
"github.com/fasthttp/session/memory"
|
|
"github.com/fasthttp/session/redis"
|
|
)
|
|
|
|
// NewProviderConfig creates a configuration for creating the session provider
|
|
func NewProviderConfig(configuration schema.SessionConfiguration) ProviderConfig {
|
|
config := session.NewDefaultConfig()
|
|
|
|
// Override the cookie name.
|
|
config.CookieName = configuration.Name
|
|
|
|
// Set the cookie to the given domain.
|
|
config.Domain = configuration.Domain
|
|
|
|
// Only serve the header over HTTPS.
|
|
config.Secure = true
|
|
|
|
// TODO(james-d-elliott): Convert to duration notation
|
|
if configuration.Expiration > 0 {
|
|
config.Expires = time.Duration(configuration.Expiration) * time.Second
|
|
} else {
|
|
// If Expiration is 0 then cookie expiration is disabled.
|
|
config.Expires = 0
|
|
}
|
|
|
|
// TODO(c.michaud): Make this configurable by giving the list of IPs that are trustable.
|
|
config.IsSecureFunc = func(*fasthttp.RequestCtx) bool {
|
|
return true
|
|
}
|
|
|
|
var providerConfig session.ProviderConfig
|
|
var providerName string
|
|
|
|
// If redis configuration is provided, then use the redis provider.
|
|
if configuration.Redis != nil {
|
|
providerName = "redis"
|
|
serializer := NewEncryptingSerializer(configuration.Secret)
|
|
providerConfig = &redis.Config{
|
|
Host: configuration.Redis.Host,
|
|
Port: configuration.Redis.Port,
|
|
Password: configuration.Redis.Password,
|
|
// DbNumber is the fasthttp/session property for the Redis DB Index
|
|
DbNumber: configuration.Redis.DatabaseIndex,
|
|
PoolSize: 8,
|
|
IdleTimeout: 300,
|
|
KeyPrefix: "authelia-session",
|
|
SerializeFunc: serializer.Encode,
|
|
UnSerializeFunc: serializer.Decode,
|
|
}
|
|
} else { // if no option is provided, use the memory provider.
|
|
providerName = "memory"
|
|
providerConfig = &memory.Config{}
|
|
}
|
|
return ProviderConfig{
|
|
config: config,
|
|
providerName: providerName,
|
|
providerConfig: providerConfig,
|
|
}
|
|
}
|