mirror of
https://github.com/sourcegraph/sourcegraph.git
synced 2026-02-06 15:31:48 +00:00
7a116a2a15
This is a big one! Merged the enterprise frontend with the OSS one, to get yet another step closer to getting rid of the enterprise directory :)
92 lines
2.6 KiB
Go
92 lines
2.6 KiB
Go
package githuboauth
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
"github.com/dghubble/gologin"
|
|
"github.com/sourcegraph/log"
|
|
|
|
"github.com/sourcegraph/sourcegraph/internal/auth/providers"
|
|
"github.com/sourcegraph/sourcegraph/internal/collections"
|
|
"github.com/sourcegraph/sourcegraph/internal/conf"
|
|
"github.com/sourcegraph/sourcegraph/internal/conf/conftypes"
|
|
"github.com/sourcegraph/sourcegraph/internal/database"
|
|
"github.com/sourcegraph/sourcegraph/internal/licensing"
|
|
"github.com/sourcegraph/sourcegraph/schema"
|
|
)
|
|
|
|
func Init(logger log.Logger, db database.DB) {
|
|
const pkgName = "githuboauth"
|
|
logger = logger.Scoped(pkgName, "GitHub OAuth config watch")
|
|
conf.ContributeValidator(func(cfg conftypes.SiteConfigQuerier) conf.Problems {
|
|
_, problems := parseConfig(logger, cfg, db)
|
|
return problems
|
|
})
|
|
|
|
go func() {
|
|
conf.Watch(func() {
|
|
newProviders, _ := parseConfig(logger, conf.Get(), db)
|
|
if len(newProviders) == 0 {
|
|
providers.Update(pkgName, nil)
|
|
return
|
|
}
|
|
|
|
if err := licensing.Check(licensing.FeatureSSO); err != nil {
|
|
logger.Error("Check license for SSO (GitHub OAuth)", log.Error(err))
|
|
providers.Update(pkgName, nil)
|
|
return
|
|
}
|
|
|
|
newProvidersList := make([]providers.Provider, 0, len(newProviders))
|
|
for _, p := range newProviders {
|
|
newProvidersList = append(newProvidersList, p.Provider)
|
|
}
|
|
providers.Update(pkgName, newProvidersList)
|
|
})
|
|
}()
|
|
}
|
|
|
|
type Provider struct {
|
|
*schema.GitHubAuthProvider
|
|
providers.Provider
|
|
}
|
|
|
|
func parseConfig(logger log.Logger, cfg conftypes.SiteConfigQuerier, db database.DB) (ps []Provider, problems conf.Problems) {
|
|
existingProviders := make(collections.Set[string])
|
|
for _, pr := range cfg.SiteConfig().AuthProviders {
|
|
if pr.Github == nil {
|
|
continue
|
|
}
|
|
|
|
provider, providerProblems := parseProvider(logger, pr.Github, db, pr)
|
|
problems = append(problems, conf.NewSiteProblems(providerProblems...)...)
|
|
if provider == nil {
|
|
continue
|
|
}
|
|
|
|
if existingProviders.Has(provider.CachedInfo().UniqueID()) {
|
|
problems = append(problems, conf.NewSiteProblems(fmt.Sprintf(`Cannot have more than one GitHub auth provider with url %q and client ID %q, only the first one will be used`, provider.ServiceID, provider.CachedInfo().ClientID))...)
|
|
continue
|
|
}
|
|
|
|
ps = append(ps, Provider{
|
|
GitHubAuthProvider: pr.Github,
|
|
Provider: provider,
|
|
})
|
|
|
|
existingProviders.Add(provider.CachedInfo().UniqueID())
|
|
}
|
|
return ps, problems
|
|
}
|
|
|
|
func getStateConfig() gologin.CookieConfig {
|
|
cfg := gologin.CookieConfig{
|
|
Name: "github-state-cookie",
|
|
Path: "/",
|
|
MaxAge: 900, // 15 minutes
|
|
HTTPOnly: true,
|
|
Secure: conf.IsExternalURLSecure(),
|
|
}
|
|
return cfg
|
|
}
|