mirror of
https://github.com/yusing/godoxy.git
synced 2025-05-20 12:42:34 +02:00
fb0dc7dea0
* implement OIDC middleware * auth code cleanup * allow override allowed_user in middleware, fix typos * fix tests and callbackURL * update next release docs * fix OIDC middleware not working with Authentik * feat: add groups support for OIDC claims (#41) Allow users to specify allowed groups in the env and use it to inspect the claims. This performs a logical AND of users and groups (additive). * merge feat/oidc-middleware (#49) * api: enrich provider statistifcs * fix: docker monitor now uses container status * Feat/auto schemas (#48) * use auto generated schemas * go version bump and dependencies upgrade * clarify some error messages --------- Co-authored-by: yusing <yusing@6uo.me> * cleanup some loadbalancer code * api: cleanup websocket code * api: add /v1/health/ws for health bubbles on dashboard * feat: experimental memory logger and logs api for WebUI --------- Co-authored-by: yusing <yusing@6uo.me> --------- Co-authored-by: yusing <yusing@6uo.me> Co-authored-by: Peter Olds <peter@olds.co>
114 lines
3.1 KiB
Go
114 lines
3.1 KiB
Go
package common
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"os"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/rs/zerolog/log"
|
|
"github.com/yusing/go-proxy/internal/utils/strutils"
|
|
)
|
|
|
|
var (
|
|
prefixes = []string{"GODOXY_", "GOPROXY_", ""}
|
|
|
|
IsTest = GetEnvBool("TEST", false) || strings.HasSuffix(os.Args[0], ".test")
|
|
IsDebug = GetEnvBool("DEBUG", IsTest)
|
|
IsTrace = GetEnvBool("TRACE", false) && IsDebug
|
|
IsProduction = !IsTest && !IsDebug
|
|
|
|
EnableLogStreaming = GetEnvBool("LOG_STREAMING", true)
|
|
DebugMemLogger = GetEnvBool("DEBUG_MEM_LOGGER", false) && EnableLogStreaming
|
|
|
|
ProxyHTTPAddr,
|
|
ProxyHTTPHost,
|
|
ProxyHTTPPort,
|
|
ProxyHTTPURL = GetAddrEnv("HTTP_ADDR", ":80", "http")
|
|
|
|
ProxyHTTPSAddr,
|
|
ProxyHTTPSHost,
|
|
ProxyHTTPSPort,
|
|
ProxyHTTPSURL = GetAddrEnv("HTTPS_ADDR", ":443", "https")
|
|
|
|
APIHTTPAddr,
|
|
APIHTTPHost,
|
|
APIHTTPPort,
|
|
APIHTTPURL = GetAddrEnv("API_ADDR", "127.0.0.1:8888", "http")
|
|
|
|
MetricsHTTPAddr,
|
|
MetricsHTTPHost,
|
|
MetricsHTTPPort,
|
|
MetricsHTTPURL = GetAddrEnv("PROMETHEUS_ADDR", "", "http")
|
|
PrometheusEnabled = MetricsHTTPURL != ""
|
|
|
|
APIJWTSecret = decodeJWTKey(GetEnvString("API_JWT_SECRET", ""))
|
|
APIJWTTokenTTL = GetDurationEnv("API_JWT_TOKEN_TTL", time.Hour)
|
|
APIUser = GetEnvString("API_USER", "admin")
|
|
APIPassword = GetEnvString("API_PASSWORD", "password")
|
|
|
|
// OIDC Configuration.
|
|
OIDCIssuerURL = GetEnvString("OIDC_ISSUER_URL", "")
|
|
OIDCClientID = GetEnvString("OIDC_CLIENT_ID", "")
|
|
OIDCClientSecret = GetEnvString("OIDC_CLIENT_SECRET", "")
|
|
OIDCRedirectURL = GetEnvString("OIDC_REDIRECT_URL", "")
|
|
OIDCScopes = GetEnvString("OIDC_SCOPES", "openid, profile, email")
|
|
OIDCAllowedUsers = GetCommaSepEnv("OIDC_ALLOWED_USERS", "")
|
|
OIDCAllowedGroups = GetCommaSepEnv("OIDC_ALLOWED_GROUPS", "")
|
|
)
|
|
|
|
func GetEnv[T any](key string, defaultValue T, parser func(string) (T, error)) T {
|
|
var value string
|
|
var ok bool
|
|
for _, prefix := range prefixes {
|
|
value, ok = os.LookupEnv(prefix + key)
|
|
if ok && value != "" {
|
|
break
|
|
}
|
|
}
|
|
if !ok || value == "" {
|
|
return defaultValue
|
|
}
|
|
parsed, err := parser(value)
|
|
if err == nil {
|
|
return parsed
|
|
}
|
|
log.Fatal().Err(err).Msgf("env %s: invalid %T value: %s", key, parsed, value)
|
|
return defaultValue
|
|
}
|
|
|
|
func GetEnvString(key string, defaultValue string) string {
|
|
return GetEnv(key, defaultValue, func(s string) (string, error) {
|
|
return s, nil
|
|
})
|
|
}
|
|
|
|
func GetEnvBool(key string, defaultValue bool) bool {
|
|
return GetEnv(key, defaultValue, strconv.ParseBool)
|
|
}
|
|
|
|
func GetAddrEnv(key, defaultValue, scheme string) (addr, host, port, fullURL string) {
|
|
addr = GetEnvString(key, defaultValue)
|
|
if addr == "" {
|
|
return
|
|
}
|
|
host, port, err := net.SplitHostPort(addr)
|
|
if err != nil {
|
|
log.Fatal().Msgf("env %s: invalid address: %s", key, addr)
|
|
}
|
|
if host == "" {
|
|
host = "localhost"
|
|
}
|
|
fullURL = fmt.Sprintf("%s://%s:%s", scheme, host, port)
|
|
return
|
|
}
|
|
|
|
func GetDurationEnv(key string, defaultValue time.Duration) time.Duration {
|
|
return GetEnv(key, defaultValue, time.ParseDuration)
|
|
}
|
|
|
|
func GetCommaSepEnv(key string, defaultValue string) []string {
|
|
return strutils.CommaSeperatedList(GetEnvString(key, defaultValue))
|
|
}
|