2015-01-03 22:03:57 +02:00
|
|
|
package authboss
|
|
|
|
|
2015-01-05 10:18:41 +02:00
|
|
|
import (
|
2015-01-24 02:25:12 +02:00
|
|
|
"time"
|
2015-02-09 09:08:33 +02:00
|
|
|
)
|
|
|
|
|
2015-01-05 10:18:41 +02:00
|
|
|
// Config holds all the configuration for both authboss and it's modules.
|
2015-01-04 20:33:53 +02:00
|
|
|
type Config struct {
|
2018-02-02 01:42:48 +02:00
|
|
|
Paths struct {
|
|
|
|
// Mount is the path to mount authboss's routes at (eg /auth).
|
|
|
|
Mount string
|
|
|
|
|
|
|
|
// AuthLoginOK is the redirect path after a successful authentication.
|
|
|
|
AuthLoginOK string
|
|
|
|
// AuthLoginFail is the redirect path after a failed authentication.
|
|
|
|
AuthLoginFail string
|
|
|
|
// AuthLogoutOK is the redirect path after a log out.
|
|
|
|
AuthLogoutOK string
|
|
|
|
|
|
|
|
// RecoverOK is the redirect path after a successful recovery of a password.
|
|
|
|
RecoverOK string
|
|
|
|
|
|
|
|
// RegisterOK is the redirect path after a successful registration.
|
|
|
|
RegisterOK string
|
|
|
|
|
|
|
|
// RootURL is the scheme+host+port of the web application (eg https://www.happiness.com:8080) for url generation. No trailing slash.
|
|
|
|
RootURL string
|
|
|
|
}
|
|
|
|
|
|
|
|
Modules struct {
|
|
|
|
// BCryptCost is the cost of the bcrypt password hashing function.
|
2018-02-02 03:23:31 +02:00
|
|
|
AuthBCryptCost int
|
|
|
|
|
|
|
|
// LogoutMethod is the method the logout route should use (default should be DELETE)
|
|
|
|
LogoutMethod string
|
2018-02-02 01:42:48 +02:00
|
|
|
|
|
|
|
// OAuth2Providers lists all providers that can be used. See
|
|
|
|
// OAuthProvider documentation for more details.
|
|
|
|
OAuth2Providers map[string]OAuth2Provider
|
|
|
|
|
|
|
|
// PreserveFields are fields used with registration that are to be rendered when
|
|
|
|
// post fails.
|
|
|
|
PreserveFields []string
|
|
|
|
|
|
|
|
// ExpireAfter controls the time an account is idle before being logged out
|
|
|
|
// by the ExpireMiddleware.
|
|
|
|
ExpireAfter time.Duration
|
|
|
|
|
|
|
|
// RecoverTokenDuration controls how long a token sent via email for password
|
|
|
|
// recovery is valid for.
|
|
|
|
RecoverTokenDuration time.Duration
|
|
|
|
|
|
|
|
// LockAfter this many tries.
|
|
|
|
LockAfter int
|
|
|
|
// LockWindow is the waiting time before the number of attemps are reset.
|
|
|
|
LockWindow time.Duration
|
|
|
|
// LockDuration is how long an account is locked for.
|
|
|
|
LockDuration time.Duration
|
|
|
|
}
|
|
|
|
|
|
|
|
Mail struct {
|
|
|
|
// From is the email address authboss e-mails come from.
|
|
|
|
From string
|
|
|
|
// SubjectPrefix is used to add something to the front of the authboss
|
|
|
|
// email subjects.
|
|
|
|
SubjectPrefix string
|
|
|
|
}
|
|
|
|
|
|
|
|
Storage struct {
|
|
|
|
// Storer is the interface through which Authboss accesses the web apps database
|
|
|
|
// for user operations.
|
|
|
|
Server ServerStorer
|
|
|
|
|
|
|
|
// CookieState must be defined to provide an interface capapable of
|
|
|
|
// storing cookies for the given response, and reading them from the request.
|
|
|
|
CookieState ClientStateReadWriter
|
|
|
|
// SessionState must be defined to provide an interface capable of
|
|
|
|
// storing session-only values for the given response, and reading them
|
|
|
|
// from the request.
|
|
|
|
SessionState ClientStateReadWriter
|
|
|
|
}
|
|
|
|
|
|
|
|
Core struct {
|
|
|
|
// Router is the entity that controls all routing to authboss routes
|
|
|
|
// modules will register their routes with it.
|
|
|
|
Router Router
|
|
|
|
|
|
|
|
// Responder takes a generic response from a controller and prepares
|
|
|
|
// the response, uses a renderer to create the body, and replies to the
|
|
|
|
// http request.
|
|
|
|
Responder HTTPResponder
|
|
|
|
|
|
|
|
// Redirector can redirect a response, similar to Responder but responsible
|
|
|
|
// only for redirection.
|
|
|
|
Redirector HTTPRedirector
|
|
|
|
|
|
|
|
// Validator helps validate an http request, it's given a name that describes
|
|
|
|
// the form it's validating so that conditional logic may be applied.
|
|
|
|
Validator Validator
|
|
|
|
|
|
|
|
// ViewRenderer loads the templates for the application.
|
|
|
|
ViewRenderer Renderer
|
|
|
|
// MailRenderer loads the templates for mail. If this is nil, it will
|
|
|
|
// fall back to using the Renderer created from the ViewLoader instead.
|
|
|
|
MailRenderer Renderer
|
|
|
|
|
|
|
|
// Mailer is the mailer being used to send e-mails out via smtp
|
|
|
|
Mailer Mailer
|
|
|
|
|
2018-02-02 22:11:47 +02:00
|
|
|
// Logger implies just a few log levels for use, can optionally
|
|
|
|
// also implement the ContextLogger to be able to upgrade to a
|
|
|
|
// request specific logger.
|
|
|
|
Logger Logger
|
2018-02-02 01:42:48 +02:00
|
|
|
}
|
2015-01-05 10:18:41 +02:00
|
|
|
}
|
2015-01-04 20:33:53 +02:00
|
|
|
|
2015-03-31 21:34:03 +02:00
|
|
|
// Defaults sets the configuration's default values.
|
|
|
|
func (c *Config) Defaults() {
|
2018-01-29 23:14:55 +02:00
|
|
|
/*c.MountPath = "/"
|
2015-03-31 21:34:03 +02:00
|
|
|
c.ViewsPath = "./"
|
|
|
|
c.RootURL = "http://localhost:8080"
|
|
|
|
c.BCryptCost = bcrypt.DefaultCost
|
|
|
|
|
|
|
|
c.PrimaryID = StoreEmail
|
|
|
|
|
|
|
|
c.AuthLoginOKPath = "/"
|
|
|
|
c.AuthLoginFailPath = "/"
|
|
|
|
c.AuthLogoutOKPath = "/"
|
|
|
|
|
|
|
|
c.RecoverOKPath = "/"
|
|
|
|
c.RecoverTokenDuration = time.Duration(24) * time.Hour
|
|
|
|
|
|
|
|
c.RegisterOKPath = "/"
|
|
|
|
|
|
|
|
c.Policies = []Validator{
|
|
|
|
Rules{
|
2015-06-04 22:34:29 +02:00
|
|
|
FieldName: "email",
|
2015-03-31 21:34:03 +02:00
|
|
|
Required: true,
|
|
|
|
AllowWhitespace: false,
|
2015-01-31 01:38:28 +02:00
|
|
|
},
|
2015-03-31 21:34:03 +02:00
|
|
|
Rules{
|
|
|
|
FieldName: "password",
|
|
|
|
Required: true,
|
|
|
|
MinLength: 4,
|
|
|
|
MaxLength: 8,
|
|
|
|
AllowWhitespace: false,
|
2015-02-22 23:16:11 +02:00
|
|
|
},
|
2015-03-31 21:34:03 +02:00
|
|
|
}
|
|
|
|
c.ConfirmFields = []string{
|
|
|
|
StorePassword, ConfirmPrefix + StorePassword,
|
|
|
|
}
|
2015-01-31 01:38:28 +02:00
|
|
|
|
2015-03-31 21:34:03 +02:00
|
|
|
c.ExpireAfter = 60 * time.Minute
|
2015-02-27 09:09:37 +02:00
|
|
|
|
2015-03-31 21:34:03 +02:00
|
|
|
c.LockAfter = 3
|
|
|
|
c.LockWindow = 5 * time.Minute
|
|
|
|
c.LockDuration = 5 * time.Hour
|
2015-03-15 17:31:48 +02:00
|
|
|
|
2015-03-31 21:34:03 +02:00
|
|
|
c.LogWriter = NewDefaultLogger()
|
|
|
|
c.Mailer = LogMailer(ioutil.Discard)
|
2015-09-11 16:03:05 +02:00
|
|
|
c.ContextProvider = func(req *http.Request) context.Context {
|
|
|
|
return context.TODO()
|
2018-01-29 23:14:55 +02:00
|
|
|
}*/
|
2015-01-04 20:33:53 +02:00
|
|
|
}
|