mirror of
https://github.com/steveiliop56/tinyauth.git
synced 2025-10-27 20:25:41 +00:00
504a3b87b4
* wip: add middlewares * refactor: use context fom middleware in handlers * refactor: use controller approach in handlers * refactor: move oauth providers into services (non-working) * feat: create oauth broker service * refactor: use a boostrap service to bootstrap the app * refactor: split utils into smaller files * refactor: use more clear name for frontend assets * feat: allow customizability of resources dir * fix: fix typo in ui middleware * fix: validate resource file paths in ui middleware * refactor: move resource handling to a controller * feat: add some logging * fix: configure middlewares before groups * fix: use correct api path in login mutation * fix: coderabbit suggestions * fix: further coderabbit suggestions
49 lines
1.2 KiB
Go
49 lines
1.2 KiB
Go
package utils
|
|
|
|
import (
|
|
"net/http"
|
|
"strings"
|
|
"tinyauth/internal/config"
|
|
|
|
"github.com/traefik/paerser/parser"
|
|
)
|
|
|
|
func GetLabels(labels map[string]string) (config.Labels, error) {
|
|
var labelsParsed config.Labels
|
|
|
|
err := parser.Decode(labels, &labelsParsed, "tinyauth", "tinyauth.users", "tinyauth.allowed", "tinyauth.headers", "tinyauth.domain", "tinyauth.basic", "tinyauth.oauth", "tinyauth.ip")
|
|
if err != nil {
|
|
return config.Labels{}, err
|
|
}
|
|
|
|
return labelsParsed, nil
|
|
}
|
|
|
|
func ParseHeaders(headers []string) map[string]string {
|
|
headerMap := make(map[string]string)
|
|
for _, header := range headers {
|
|
split := strings.SplitN(header, "=", 2)
|
|
if len(split) != 2 || strings.TrimSpace(split[0]) == "" || strings.TrimSpace(split[1]) == "" {
|
|
continue
|
|
}
|
|
key := SanitizeHeader(strings.TrimSpace(split[0]))
|
|
if strings.ContainsAny(key, " \t") {
|
|
continue
|
|
}
|
|
key = http.CanonicalHeaderKey(key)
|
|
value := SanitizeHeader(strings.TrimSpace(split[1]))
|
|
headerMap[key] = value
|
|
}
|
|
return headerMap
|
|
}
|
|
|
|
func SanitizeHeader(header string) string {
|
|
return strings.Map(func(r rune) rune {
|
|
// Allow only printable ASCII characters (32-126) and safe whitespace (space, tab)
|
|
if r == ' ' || r == '\t' || (r >= 32 && r <= 126) {
|
|
return r
|
|
}
|
|
return -1
|
|
}, header)
|
|
}
|