mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2026-05-11 14:58:10 +00:00
Stavros
4f7335ed73
* feat: add new logger * refactor: use one struct for context handling and cancellation * refactor: rework logging and config in controllers * refactor: rework logging and config in middlewares * refactor: rework logging and cancellation in services * refactor: rework cli logging * fix: improve logging in routines * feat: use sync groups for better cancellation * refactor: simplify middleware, controller and service init * tests: fix controller tests * tests: use require instead of assert where previous step is required * tests: fix middleware tests * tests: fix service tests * tests: fix context tests * fix: fix typos * feat: add option to enable or disable concurrent listeners * fix: assign public key correctly in oidc server * tests: fix don't try to test logger with char size * fix: coderabbit comments * tests: use filepath join instead of path join * fix: ensure unix socket shutdown doesn't run twice * chore: remove temp lint file
66 lines
1.6 KiB
Go
66 lines
1.6 KiB
Go
package service
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/tinyauthapp/tinyauth/internal/model"
|
|
"github.com/tinyauthapp/tinyauth/internal/utils/logger"
|
|
)
|
|
|
|
type LabelProvider interface {
|
|
GetLabels(appDomain string) (*model.App, error)
|
|
}
|
|
|
|
type AccessControlsService struct {
|
|
log *logger.Logger
|
|
labelProvider *LabelProvider
|
|
static map[string]model.App
|
|
}
|
|
|
|
func NewAccessControlsService(
|
|
log *logger.Logger,
|
|
labelProvider *LabelProvider,
|
|
static map[string]model.App) *AccessControlsService {
|
|
return &AccessControlsService{
|
|
log: log,
|
|
labelProvider: labelProvider,
|
|
static: static,
|
|
}
|
|
}
|
|
|
|
func (acls *AccessControlsService) lookupStaticACLs(domain string) *model.App {
|
|
var appAcls *model.App
|
|
for app, config := range acls.static {
|
|
if config.Config.Domain == domain {
|
|
acls.log.App.Debug().Str("name", app).Msg("Found matching container by domain")
|
|
appAcls = &config
|
|
break // If we find a match by domain, we can stop searching
|
|
}
|
|
|
|
if strings.SplitN(domain, ".", 2)[0] == app {
|
|
acls.log.App.Debug().Str("name", app).Msg("Found matching container by app name")
|
|
appAcls = &config
|
|
break // If we find a match by app name, we can stop searching
|
|
}
|
|
}
|
|
return appAcls
|
|
}
|
|
|
|
func (acls *AccessControlsService) GetAccessControls(domain string) (*model.App, error) {
|
|
// First check in the static config
|
|
app := acls.lookupStaticACLs(domain)
|
|
|
|
if app != nil {
|
|
acls.log.App.Debug().Msg("Using static ACLs for app")
|
|
return app, nil
|
|
}
|
|
|
|
// If we have a label provider configured, try to get ACLs from it
|
|
if acls.labelProvider != nil {
|
|
return (*acls.labelProvider).GetLabels(domain)
|
|
}
|
|
|
|
// no labels
|
|
return nil, nil
|
|
}
|