package authboss import ( "time" ) // Config holds all the configuration for both authboss and it's modules. type Config struct { Paths struct { // Mount is the path to mount authboss's routes at (eg /auth). Mount string // AuthLoginOK is the redirect path after a successful authentication. AuthLoginOK string // AuthLoginFail is the redirect path after a failed authentication. AuthLoginFail string // AuthLogoutOK is the redirect path after a log out. AuthLogoutOK string // RecoverOK is the redirect path after a successful recovery of a password. RecoverOK string // RegisterOK is the redirect path after a successful registration. RegisterOK string // RootURL is the scheme+host+port of the web application (eg https://www.happiness.com:8080) for url generation. No trailing slash. RootURL string } Modules struct { // BCryptCost is the cost of the bcrypt password hashing function. AuthBCryptCost int // LogoutMethod is the method the logout route should use (default should be DELETE) LogoutMethod string // OAuth2Providers lists all providers that can be used. See // OAuthProvider documentation for more details. OAuth2Providers map[string]OAuth2Provider // PreserveFields are fields used with registration that are to be rendered when // post fails. PreserveFields []string // ExpireAfter controls the time an account is idle before being logged out // by the ExpireMiddleware. ExpireAfter time.Duration // RecoverTokenDuration controls how long a token sent via email for password // recovery is valid for. RecoverTokenDuration time.Duration // LockAfter this many tries. LockAfter int // LockWindow is the waiting time before the number of attemps are reset. LockWindow time.Duration // LockDuration is how long an account is locked for. LockDuration time.Duration } Mail struct { // From is the email address authboss e-mails come from. From string // SubjectPrefix is used to add something to the front of the authboss // email subjects. SubjectPrefix string } Storage struct { // Storer is the interface through which Authboss accesses the web apps database // for user operations. Server ServerStorer // CookieState must be defined to provide an interface capapable of // storing cookies for the given response, and reading them from the request. CookieState ClientStateReadWriter // SessionState must be defined to provide an interface capable of // storing session-only values for the given response, and reading them // from the request. SessionState ClientStateReadWriter } Core struct { // Router is the entity that controls all routing to authboss routes // modules will register their routes with it. Router Router // ErrorHandler wraps http requests with centralized error handling. ErrorHandler ErrorHandler // Responder takes a generic response from a controller and prepares // the response, uses a renderer to create the body, and replies to the // http request. Responder HTTPResponder // Redirector can redirect a response, similar to Responder but responsible // only for redirection. Redirector HTTPRedirector // Validator helps validate an http request, it's given a name that describes // the form it's validating so that conditional logic may be applied. Validator Validator // ViewRenderer loads the templates for the application. ViewRenderer Renderer // MailRenderer loads the templates for mail. If this is nil, it will // fall back to using the Renderer created from the ViewLoader instead. MailRenderer Renderer // Mailer is the mailer being used to send e-mails out via smtp Mailer Mailer // Logger implies just a few log levels for use, can optionally // also implement the ContextLogger to be able to upgrade to a // request specific logger. Logger Logger } } // Defaults sets the configuration's default values. func (c *Config) Defaults() { /*c.MountPath = "/" c.ViewsPath = "./" c.RootURL = "http://localhost:8080" c.BCryptCost = bcrypt.DefaultCost c.PrimaryID = StoreEmail c.AuthLoginOKPath = "/" c.AuthLoginFailPath = "/" c.AuthLogoutOKPath = "/" c.RecoverOKPath = "/" c.RecoverTokenDuration = time.Duration(24) * time.Hour c.RegisterOKPath = "/" c.Policies = []Validator{ Rules{ FieldName: "email", Required: true, AllowWhitespace: false, }, Rules{ FieldName: "password", Required: true, MinLength: 4, MaxLength: 8, AllowWhitespace: false, }, } c.ConfirmFields = []string{ StorePassword, ConfirmPrefix + StorePassword, } c.ExpireAfter = 60 * time.Minute c.LockAfter = 3 c.LockWindow = 5 * time.Minute c.LockDuration = 5 * time.Hour c.LogWriter = NewDefaultLogger() c.Mailer = LogMailer(ioutil.Discard) c.ContextProvider = func(req *http.Request) context.Context { return context.TODO() }*/ }