git.iko.soy/typeable/oauth2-proxy
on proxy-mapping help sign in
typeable/oauth2-proxy/providers/provider_data.go
81 lines 2.2 kB history raw
1package providers
3import (
4 "errors"
5 "io/ioutil"
6 "net/url"
8 "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/logger"
9)
11// ProviderData contains information required to configure all implementations
12// of OAuth2 providers
13type ProviderData struct {
14 ProviderName string
15 LoginURL *url.URL
16 RedeemURL *url.URL
17 ProfileURL *url.URL
18 ProtectedResource *url.URL
19 ValidateURL *url.URL
20 // Auth request params & related, see
21 //https://openid.net/specs/openid-connect-basic-1_0.html#rfc.section.2.1.1.1
22 AcrValues string
23 ApprovalPrompt string // NOTE: Renamed to "prompt" in OAuth2
24 ClientID string
25 ClientSecret string
26 ClientSecretFile string
27 Scope string
28 Prompt string
31// Data returns the ProviderData
32func (p *ProviderData) Data() *ProviderData { return p }
34func (p *ProviderData) GetClientSecret() (clientSecret string, err error) {
35 if p.ClientSecret != "" || p.ClientSecretFile == "" {
36 return p.ClientSecret, nil
37 }
39 // Getting ClientSecret can fail in runtime so we need to report it without returning the file name to the user
40 fileClientSecret, err := ioutil.ReadFile(p.ClientSecretFile)
41 if err != nil {
42 logger.Errorf("error reading client secret file %s: %s", p.ClientSecretFile, err)
43 return "", errors.New("could not read client secret file")
44 }
45 return string(fileClientSecret), nil
48type providerDefaults struct {
49 name string
50 loginURL *url.URL
51 redeemURL *url.URL
52 profileURL *url.URL
53 validateURL *url.URL
54 scope string
57func (p *ProviderData) setProviderDefaults(defaults providerDefaults) {
58 p.ProviderName = defaults.name
59 p.LoginURL = defaultURL(p.LoginURL, defaults.loginURL)
60 p.RedeemURL = defaultURL(p.RedeemURL, defaults.redeemURL)
61 p.ProfileURL = defaultURL(p.ProfileURL, defaults.profileURL)
62 p.ValidateURL = defaultURL(p.ValidateURL, defaults.validateURL)
64 if p.Scope == "" {
65 p.Scope = defaults.scope
66 }
69// defaultURL will set return a default value if the given value is not set.
70func defaultURL(u *url.URL, d *url.URL) *url.URL {
71 if u != nil && u.String() != "" {
72 // The value is already set
73 return u
74 }
76 // If the default is given, return that
77 if d != nil {
78 return d
79 }
80 return &url.URL{}