mirror of
https://github.com/grafana/grafana.git
synced 2024-11-29 20:24:18 -06:00
437ae8e8c5
* Refactor AzureAD to init itself
* Use mapstructure to convert data to OAuthInfo
* Update
* Align tests
* Remove unused functions
* Add owner to mapstructure
* Clean up, lint
* Refactor Okta init, Align tests
* Address review comments, fix name in newSocialBase
* Update newSocialBase first param
* Refactor GitLab init, align tests
* Update pkg/login/social/common.go
Co-authored-by: Karl Persson <kalle.persson@grafana.com>
* Use ini conversion to map
* Leftovers
* Refactor GitHub connector initialization, align tests
* Refactor Google connector init, align tests
* Refactor grafana_com connector, align tests
* Refactor generic_oauth connector init, align tests
* cleanup
* Remove util.go
* Add tests for custom field init
* Change OAuthInfo's Extra type
* Fix
* Replace interface{} with any
* clean up
---------
Co-authored-by: Karl Persson <kalle.persson@grafana.com>
75 lines
3.3 KiB
Go
75 lines
3.3 KiB
Go
package strategies
|
|
|
|
import (
|
|
"context"
|
|
"regexp"
|
|
"strings"
|
|
|
|
"github.com/grafana/grafana/pkg/services/ssosettings"
|
|
"github.com/grafana/grafana/pkg/setting"
|
|
)
|
|
|
|
type OAuthStrategy struct {
|
|
provider string
|
|
cfg *setting.Cfg
|
|
supportedProvidersRegex *regexp.Regexp
|
|
}
|
|
|
|
var _ ssosettings.FallbackStrategy = (*OAuthStrategy)(nil)
|
|
|
|
func NewOAuthStrategy(cfg *setting.Cfg) *OAuthStrategy {
|
|
compiledRegex := regexp.MustCompile(`^` + strings.Join(ssosettings.AllOAuthProviders, "|") + `$`)
|
|
return &OAuthStrategy{
|
|
cfg: cfg,
|
|
supportedProvidersRegex: compiledRegex,
|
|
}
|
|
}
|
|
|
|
func (s *OAuthStrategy) IsMatch(provider string) bool {
|
|
return s.supportedProvidersRegex.MatchString(provider)
|
|
}
|
|
|
|
func (s *OAuthStrategy) ParseConfigFromSystem(_ context.Context) (map[string]any, error) {
|
|
section := s.cfg.SectionWithEnvOverrides("auth." + s.provider)
|
|
|
|
// TODO: load the provider specific keys separately
|
|
result := map[string]any{
|
|
"client_id": section.Key("client_id").Value(),
|
|
"client_secret": section.Key("client_secret").Value(),
|
|
"scopes": section.Key("scopes").Value(),
|
|
"auth_url": section.Key("auth_url").Value(),
|
|
"token_url": section.Key("token_url").Value(),
|
|
"api_url": section.Key("api_url").Value(),
|
|
"teams_url": section.Key("teams_url").Value(),
|
|
"enabled": section.Key("enabled").MustBool(false),
|
|
"email_attribute_name": section.Key("email_attribute_name").Value(),
|
|
"email_attribute_path": section.Key("email_attribute_path").Value(),
|
|
"role_attribute_path": section.Key("role_attribute_path").Value(),
|
|
"role_attribute_strict": section.Key("role_attribute_strict").MustBool(false),
|
|
"groups_attribute_path": section.Key("groups_attribute_path").Value(),
|
|
"team_ids_attribute_path": section.Key("team_ids_attribute_path").Value(),
|
|
"allowed_domains": section.Key("allowed_domains").Value(),
|
|
"hosted_domain": section.Key("hosted_domain").Value(),
|
|
"allow_sign_up": section.Key("allow_sign_up").MustBool(true),
|
|
"name": section.Key("name").MustString("default name"), // TODO: change this default value
|
|
"icon": section.Key("icon").Value(),
|
|
// TODO: @mgyongyosi move skipOrgRoleSync here in a separate PR
|
|
// "skip_org_role_sync": section.Key("skip_org_role_sync").MustBool(false),
|
|
"tls_client_cert": section.Key("tls_client_cert").Value(),
|
|
"tls_client_key": section.Key("tls_client_key").Value(),
|
|
"tls_client_ca": section.Key("tls_client_ca").Value(),
|
|
"tls_skip_verify_insecure": section.Key("tls_skip_verify_insecure").MustBool(false),
|
|
"use_pkce": section.Key("use_pkce").MustBool(true),
|
|
"use_refresh_token": section.Key("use_refresh_token").MustBool(false),
|
|
"allow_assign_grafana_admin": section.Key("allow_assign_grafana_admin").MustBool(false),
|
|
"auto_login": section.Key("auto_login").MustBool(false),
|
|
"allowed_groups": section.Key("allowed_groups").Value(),
|
|
}
|
|
|
|
// when empty_scopes parameter exists and is true, overwrite scope with empty value
|
|
if section.Key("empty_scopes").MustBool(false) {
|
|
result["scopes"] = []string{}
|
|
}
|
|
return result, nil
|
|
}
|