Compare commits

..

1 Commits

Author SHA1 Message Date
dependabot[bot]
53473509f8 chore(deps): bump oven/bun from 1.3.0-alpine to 1.3.1-alpine
Bumps oven/bun from 1.3.0-alpine to 1.3.1-alpine.

---
updated-dependencies:
- dependency-name: oven/bun
  dependency-version: 1.3.1-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-22 08:26:11 +00:00
12 changed files with 208 additions and 102 deletions

View File

@@ -1,5 +1,5 @@
# Site builder # Site builder
FROM oven/bun:1.3.0-alpine AS frontend-builder FROM oven/bun:1.3.1-alpine AS frontend-builder
WORKDIR /frontend WORKDIR /frontend

View File

@@ -1,5 +1,5 @@
# Site builder # Site builder
FROM oven/bun:1.3.0-alpine AS frontend-builder FROM oven/bun:1.3.1-alpine AS frontend-builder
WORKDIR /frontend WORKDIR /frontend

1
go.mod
View File

@@ -47,7 +47,6 @@ require (
github.com/quic-go/qpack v0.5.1 // indirect github.com/quic-go/qpack v0.5.1 // indirect
github.com/quic-go/quic-go v0.54.1 // indirect github.com/quic-go/quic-go v0.54.1 // indirect
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
github.com/stoewer/go-strcase v1.3.1 // indirect
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
go.opentelemetry.io/auto/sdk v1.1.0 // indirect go.opentelemetry.io/auto/sdk v1.1.0 // indirect
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.34.0 // indirect go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.34.0 // indirect

2
go.sum
View File

@@ -259,8 +259,6 @@ github.com/spf13/pflag v1.0.10 h1:4EBh2KAYBwaONj6b2Ye1GiHfwjqyROoF4RwYO+vPwFk=
github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU= github.com/spf13/viper v1.21.0 h1:x5S+0EU27Lbphp4UKm1C+1oQO+rKx36vfCoaVebLFSU=
github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY= github.com/spf13/viper v1.21.0/go.mod h1:P0lhsswPGWD/1lZJ9ny3fYnVqxiegrlNrEmgLjbTCAY=
github.com/stoewer/go-strcase v1.3.1 h1:iS0MdW+kVTxgMoE1LAZyMiYJFKlOzLooE4MxjirtkAs=
github.com/stoewer/go-strcase v1.3.1/go.mod h1:fAH5hQ5pehh+j3nZfvwdk2RgEgQjAoM8wodgtPmh1xo=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=

View File

@@ -53,16 +53,16 @@ type Claims struct {
} }
type OAuthServiceConfig struct { type OAuthServiceConfig struct {
ClientID string `field:"client-id"` ClientID string `key:"client-id"`
ClientSecret string ClientSecret string `key:"client-secret"`
ClientSecretFile string ClientSecretFile string `key:"client-secret-file"`
Scopes []string Scopes []string `key:"scopes"`
RedirectURL string `field:"redirect-url"` RedirectURL string `key:"redirect-url"`
AuthURL string `field:"auth-url"` AuthURL string `key:"auth-url"`
TokenURL string `field:"token-url"` TokenURL string `key:"token-url"`
UserinfoURL string `field:"user-info-url"` UserinfoURL string `key:"user-info-url"`
InsecureSkipVerify bool InsecureSkipVerify bool `key:"insecure-skip-verify"`
Name string Name string `key:"name"`
} }
var OverrideProviders = map[string]string{ var OverrideProviders = map[string]string{

View File

@@ -147,7 +147,7 @@ func GetOAuthProvidersConfig(env []string, args []string, appUrl string) (map[st
} }
} }
envProviders, err := decoders.DecodeEnv[config.Providers, config.OAuthServiceConfig](envMap, "providers") envProviders, err := decoders.DecodeEnv(envMap)
if err != nil { if err != nil {
return nil, err return nil, err
@@ -167,7 +167,7 @@ func GetOAuthProvidersConfig(env []string, args []string, appUrl string) (map[st
} }
} }
flagProviders, err := decoders.DecodeFlags[config.Providers, config.OAuthServiceConfig](flagsMap, "providers") flagProviders, err := decoders.DecodeFlags(flagsMap)
if err != nil { if err != nil {
return nil, err return nil, err

View File

@@ -3,24 +3,29 @@ package decoders
import ( import (
"reflect" "reflect"
"strings" "strings"
"tinyauth/internal/config"
"github.com/stoewer/go-strcase"
) )
func normalizeKeys[T any](input map[string]string, root string, sep string) map[string]string { func NormalizeKeys(keys map[string]string, rootName string, sep string) map[string]string {
knownKeys := getKnownKeys[T]()
normalized := make(map[string]string) normalized := make(map[string]string)
knownKeys := getKnownKeys()
for k, v := range input { for k, v := range keys {
parts := []string{"tinyauth"} var finalKey []string
var suffix string
var camelClientName string
var camelField string
key := strings.ToLower(k) finalKey = append(finalKey, rootName)
key = strings.ReplaceAll(key, sep, "-") finalKey = append(finalKey, "providers")
lowerKey := strings.ToLower(k)
suffix := "" if !strings.HasPrefix(lowerKey, "providers"+sep) {
continue
}
for _, known := range knownKeys { for _, known := range knownKeys {
if strings.HasSuffix(key, known) { if strings.HasSuffix(lowerKey, strings.ReplaceAll(known, "-", sep)) {
suffix = known suffix = known
break break
} }
@@ -30,47 +35,55 @@ func normalizeKeys[T any](input map[string]string, root string, sep string) map[
continue continue
} }
parts = append(parts, root) if strings.TrimSpace(strings.TrimSuffix(strings.TrimPrefix(lowerKey, "providers"+sep), strings.ReplaceAll(suffix, "-", sep))) == "" {
id := strings.TrimPrefix(key, root+"-")
id = strings.TrimSuffix(id, "-"+suffix)
if id == "" {
continue continue
} }
parts = append(parts, id) clientNameParts := strings.Split(strings.TrimPrefix(strings.TrimSuffix(lowerKey, sep+strings.ReplaceAll(suffix, "-", sep)), "providers"+sep), sep)
parts = append(parts, suffix)
final := "" for i, p := range clientNameParts {
if i == 0 {
for i, part := range parts { camelClientName += p
if i > 0 { continue
final += "."
} }
final += strcase.LowerCamelCase(part) if p == "" {
continue
}
camelClientName += strings.ToUpper(string([]rune(p)[0])) + string([]rune(p)[1:])
} }
normalized[final] = v finalKey = append(finalKey, camelClientName)
fieldParts := strings.Split(suffix, "-")
for i, p := range fieldParts {
if i == 0 {
camelField += p
continue
}
if p == "" {
continue
}
camelField += strings.ToUpper(string([]rune(p)[0])) + string([]rune(p)[1:])
}
finalKey = append(finalKey, camelField)
normalized[strings.Join(finalKey, ".")] = v
} }
return normalized return normalized
} }
func getKnownKeys[T any]() []string { func getKnownKeys() []string {
var keys []string var known []string
var t T
v := reflect.ValueOf(t) p := config.OAuthServiceConfig{}
typeOfT := v.Type() v := reflect.ValueOf(p)
typeOfP := v.Type()
for field := range typeOfT.NumField() { for field := range typeOfP.NumField() {
if typeOfT.Field(field).Tag.Get("field") != "" { known = append(known, typeOfP.Field(field).Tag.Get("key"))
keys = append(keys, typeOfT.Field(field).Tag.Get("field"))
continue
}
keys = append(keys, strcase.KebabCase(typeOfT.Field(field).Name))
} }
return keys return known
} }

View File

@@ -0,0 +1,49 @@
package decoders_test
import (
"testing"
"tinyauth/internal/utils/decoders"
"gotest.tools/v3/assert"
)
func TestNormalizeKeys(t *testing.T) {
// Test with env
test := map[string]string{
"PROVIDERS_CLIENT1_CLIENT_ID": "my-client-id",
"PROVIDERS_CLIENT1_CLIENT_SECRET": "my-client-secret",
"PROVIDERS_MY_AWESOME_CLIENT_CLIENT_ID": "my-awesome-client-id",
"PROVIDERS_MY_AWESOME_CLIENT_CLIENT_SECRET_FILE": "/path/to/secret",
"I_LOOK_LIKE_A_KEY_CLIENT_ID": "should-not-appear",
"PROVIDERS_CLIENT_ID": "should-not-appear",
}
expected := map[string]string{
"tinyauth.providers.client1.clientId": "my-client-id",
"tinyauth.providers.client1.clientSecret": "my-client-secret",
"tinyauth.providers.myAwesomeClient.clientId": "my-awesome-client-id",
"tinyauth.providers.myAwesomeClient.clientSecretFile": "/path/to/secret",
}
normalized := decoders.NormalizeKeys(test, "tinyauth", "_")
assert.DeepEqual(t, normalized, expected)
// Test with flags (assume -- is already stripped)
test = map[string]string{
"providers-client1-client-id": "my-client-id",
"providers-client1-client-secret": "my-client-secret",
"providers-my-awesome-client-client-id": "my-awesome-client-id",
"providers-my-awesome-client-client-secret-file": "/path/to/secret",
"providers-should-not-appear-client": "should-not-appear",
"i-look-like-a-key-client-id": "should-not-appear",
"providers-client-id": "should-not-appear",
}
expected = map[string]string{
"tinyauth.providers.client1.clientId": "my-client-id",
"tinyauth.providers.client1.clientSecret": "my-client-secret",
"tinyauth.providers.myAwesomeClient.clientId": "my-awesome-client-id",
"tinyauth.providers.myAwesomeClient.clientSecretFile": "/path/to/secret",
}
normalized = decoders.NormalizeKeys(test, "tinyauth", "-")
assert.DeepEqual(t, normalized, expected)
}

View File

@@ -1,19 +1,20 @@
package decoders package decoders
import ( import (
"tinyauth/internal/config"
"github.com/traefik/paerser/parser" "github.com/traefik/paerser/parser"
) )
func DecodeEnv[T any, C any](env map[string]string, subName string) (T, error) { func DecodeEnv(env map[string]string) (config.Providers, error) {
var result T normalized := NormalizeKeys(env, "tinyauth", "_")
var providers config.Providers
normalized := normalizeKeys[C](env, subName, "_") err := parser.Decode(normalized, &providers, "tinyauth", "tinyauth.providers")
err := parser.Decode(normalized, &result, "tinyauth", "tinyauth."+subName)
if err != nil { if err != nil {
return result, err return config.Providers{}, err
} }
return result, nil return providers, nil
} }

View File

@@ -9,29 +9,52 @@ import (
) )
func TestDecodeEnv(t *testing.T) { func TestDecodeEnv(t *testing.T) {
// Setup // Variables
env := map[string]string{
"PROVIDERS_GOOGLE_CLIENT_ID": "google-client-id",
"PROVIDERS_GOOGLE_CLIENT_SECRET": "google-client-secret",
"PROVIDERS_MY_GITHUB_CLIENT_ID": "github-client-id",
"PROVIDERS_MY_GITHUB_CLIENT_SECRET": "github-client-secret",
}
expected := config.Providers{ expected := config.Providers{
Providers: map[string]config.OAuthServiceConfig{ Providers: map[string]config.OAuthServiceConfig{
"google": { "client1": {
ClientID: "google-client-id", ClientID: "client1-id",
ClientSecret: "google-client-secret", ClientSecret: "client1-secret",
Scopes: []string{"client1-scope1", "client1-scope2"},
RedirectURL: "client1-redirect-url",
AuthURL: "client1-auth-url",
UserinfoURL: "client1-user-info-url",
Name: "Client1",
InsecureSkipVerify: false,
}, },
"myGithub": { "client2": {
ClientID: "github-client-id", ClientID: "client2-id",
ClientSecret: "github-client-secret", ClientSecret: "client2-secret",
Scopes: []string{"client2-scope1", "client2-scope2"},
RedirectURL: "client2-redirect-url",
AuthURL: "client2-auth-url",
UserinfoURL: "client2-user-info-url",
Name: "My Awesome Client2",
InsecureSkipVerify: false,
}, },
}, },
} }
test := map[string]string{
"PROVIDERS_CLIENT1_CLIENT_ID": "client1-id",
"PROVIDERS_CLIENT1_CLIENT_SECRET": "client1-secret",
"PROVIDERS_CLIENT1_SCOPES": "client1-scope1,client1-scope2",
"PROVIDERS_CLIENT1_REDIRECT_URL": "client1-redirect-url",
"PROVIDERS_CLIENT1_AUTH_URL": "client1-auth-url",
"PROVIDERS_CLIENT1_USER_INFO_URL": "client1-user-info-url",
"PROVIDERS_CLIENT1_NAME": "Client1",
"PROVIDERS_CLIENT1_INSECURE_SKIP_VERIFY": "false",
"PROVIDERS_CLIENT2_CLIENT_ID": "client2-id",
"PROVIDERS_CLIENT2_CLIENT_SECRET": "client2-secret",
"PROVIDERS_CLIENT2_SCOPES": "client2-scope1,client2-scope2",
"PROVIDERS_CLIENT2_REDIRECT_URL": "client2-redirect-url",
"PROVIDERS_CLIENT2_AUTH_URL": "client2-auth-url",
"PROVIDERS_CLIENT2_USER_INFO_URL": "client2-user-info-url",
"PROVIDERS_CLIENT2_NAME": "My Awesome Client2",
"PROVIDERS_CLIENT2_INSECURE_SKIP_VERIFY": "false",
}
// Execute // Test
result, err := decoders.DecodeEnv[config.Providers, config.OAuthServiceConfig](env, "providers") res, err := decoders.DecodeEnv(test)
assert.NilError(t, err) assert.NilError(t, err)
assert.DeepEqual(t, result, expected) assert.DeepEqual(t, expected, res)
} }

View File

@@ -2,23 +2,23 @@ package decoders
import ( import (
"strings" "strings"
"tinyauth/internal/config"
"github.com/traefik/paerser/parser" "github.com/traefik/paerser/parser"
) )
func DecodeFlags[T any, C any](flags map[string]string, subName string) (T, error) { func DecodeFlags(flags map[string]string) (config.Providers, error) {
var result T
filtered := filterFlags(flags) filtered := filterFlags(flags)
normalized := normalizeKeys[C](filtered, subName, "_") normalized := NormalizeKeys(filtered, "tinyauth", "-")
var providers config.Providers
err := parser.Decode(normalized, &result, "tinyauth", "tinyauth."+subName) err := parser.Decode(normalized, &providers, "tinyauth", "tinyauth.providers")
if err != nil { if err != nil {
return result, err return config.Providers{}, err
} }
return result, nil return providers, nil
} }
func filterFlags(flags map[string]string) map[string]string { func filterFlags(flags map[string]string) map[string]string {

View File

@@ -9,29 +9,52 @@ import (
) )
func TestDecodeFlags(t *testing.T) { func TestDecodeFlags(t *testing.T) {
// Setup // Variables
flags := map[string]string{
"--providers-google-client-id": "google-client-id",
"--providers-google-client-secret": "google-client-secret",
"--providers-my-github-client-id": "github-client-id",
"--providers-my-github-client-secret": "github-client-secret",
}
expected := config.Providers{ expected := config.Providers{
Providers: map[string]config.OAuthServiceConfig{ Providers: map[string]config.OAuthServiceConfig{
"google": { "client1": {
ClientID: "google-client-id", ClientID: "client1-id",
ClientSecret: "google-client-secret", ClientSecret: "client1-secret",
Scopes: []string{"client1-scope1", "client1-scope2"},
RedirectURL: "client1-redirect-url",
AuthURL: "client1-auth-url",
UserinfoURL: "client1-user-info-url",
Name: "Client1",
InsecureSkipVerify: false,
}, },
"myGithub": { "client2": {
ClientID: "github-client-id", ClientID: "client2-id",
ClientSecret: "github-client-secret", ClientSecret: "client2-secret",
Scopes: []string{"client2-scope1", "client2-scope2"},
RedirectURL: "client2-redirect-url",
AuthURL: "client2-auth-url",
UserinfoURL: "client2-user-info-url",
Name: "My Awesome Client2",
InsecureSkipVerify: false,
}, },
}, },
} }
test := map[string]string{
"--providers-client1-client-id": "client1-id",
"--providers-client1-client-secret": "client1-secret",
"--providers-client1-scopes": "client1-scope1,client1-scope2",
"--providers-client1-redirect-url": "client1-redirect-url",
"--providers-client1-auth-url": "client1-auth-url",
"--providers-client1-user-info-url": "client1-user-info-url",
"--providers-client1-name": "Client1",
"--providers-client1-insecure-skip-verify": "false",
"--providers-client2-client-id": "client2-id",
"--providers-client2-client-secret": "client2-secret",
"--providers-client2-scopes": "client2-scope1,client2-scope2",
"--providers-client2-redirect-url": "client2-redirect-url",
"--providers-client2-auth-url": "client2-auth-url",
"--providers-client2-user-info-url": "client2-user-info-url",
"--providers-client2-name": "My Awesome Client2",
"--providers-client2-insecure-skip-verify": "false",
}
// Execute // Test
result, err := decoders.DecodeFlags[config.Providers, config.OAuthServiceConfig](flags, "providers") res, err := decoders.DecodeFlags(test)
assert.NilError(t, err) assert.NilError(t, err)
assert.DeepEqual(t, result, expected) assert.DeepEqual(t, expected, res)
} }