mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
626f5d2949
* [FEATURE] Remember Me Configuration * allow users to specify the duration of remember me using remember_me_duration in session config * setting the duration to 0 disables remember me * only render the remember me element if remember me is enabled * prevent malicious users from faking remember me functionality in the backend * add string to duration helper called ParseDurationString to parse a string into a duration * added tests to the helper function * use the SessionProvider to store the time.Duration instead of parsing it over and over again * add sec doc, adjust month/min, consistency * renamed internal/utils/constants.go to internal/utils/const.go to be consistent * added security measure docs * adjusted default remember me duration to be 1 month instead of 1 year * utilize default remember me duration in the autheliaCtx mock * adjust order of keys in session configuration examples * add notes on session security measures secret only being redis * add TODO items for duration notation for both Expiration and Inactivity (will be removed soon) * fix error text for Inactivity in the validator * add session validator tests * deref check bodyJSON.KeepMeLoggedIn and derive the value based on conf and user input and store it (DRY) * remove unnecessary regex for the simplified ParseDurationString utility * ParseDurationString only accepts decimals without leading zeros now * comprehensively test all unit types * remove unnecessary type unions in web * add test to check sanity of time duration consts, this is just so they can't be accidentally changed * simplify deref check and assignment * fix reset password padding/margins * adjust some doc wording * adjust the handler configuration suite test * actually run the handler configuration suite test (whoops) * reduce the number of regex's used by ParseDurationString to 1, thanks to Clement * adjust some error wording
49 lines
1.4 KiB
Go
49 lines
1.4 KiB
Go
package utils
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"strconv"
|
|
"time"
|
|
)
|
|
|
|
// Parses a string to a duration
|
|
// Duration notations are an integer followed by a unit
|
|
// Units are s = second, m = minute, d = day, w = week, M = month, y = year
|
|
// Example 1y is the same as 1 year
|
|
func ParseDurationString(input string) (duration time.Duration, err error) {
|
|
duration = 0
|
|
err = nil
|
|
matches := parseDurationRegexp.FindStringSubmatch(input)
|
|
if len(matches) == 3 && matches[2] != "" {
|
|
d, _ := strconv.Atoi(matches[1])
|
|
switch matches[2] {
|
|
case "y":
|
|
duration = time.Duration(d) * Year
|
|
case "M":
|
|
duration = time.Duration(d) * Month
|
|
case "w":
|
|
duration = time.Duration(d) * Week
|
|
case "d":
|
|
duration = time.Duration(d) * Day
|
|
case "h":
|
|
duration = time.Duration(d) * Hour
|
|
case "m":
|
|
duration = time.Duration(d) * time.Minute
|
|
case "s":
|
|
duration = time.Duration(d) * time.Second
|
|
}
|
|
} else if input == "0" || len(matches) == 3 {
|
|
seconds, err := strconv.Atoi(input)
|
|
if err != nil {
|
|
err = errors.New(fmt.Sprintf("could not convert the input string of %s into a duration: %s", input, err))
|
|
} else {
|
|
duration = time.Duration(seconds) * time.Second
|
|
}
|
|
} else if input != "" {
|
|
// Throw this error if input is anything other than a blank string, blank string will default to a duration of nothing
|
|
err = errors.New(fmt.Sprintf("could not convert the input string of %s into a duration", input))
|
|
}
|
|
return
|
|
}
|