93 lines
2.9 KiB
Go
93 lines
2.9 KiB
Go
package validator
|
|
|
|
import (
|
|
"fmt"
|
|
"path"
|
|
"strings"
|
|
|
|
"github.com/authelia/authelia/v4/internal/configuration/schema"
|
|
"github.com/authelia/authelia/v4/internal/utils"
|
|
)
|
|
|
|
// validateFileExists checks whether a file exist.
|
|
func validateFileExists(path string, validator *schema.StructValidator, errTemplate string) {
|
|
exist, err := utils.FileExists(path)
|
|
if err != nil {
|
|
validator.Push(fmt.Errorf("tls: unable to check if file %s exists: %s", path, err))
|
|
}
|
|
|
|
if !exist {
|
|
validator.Push(fmt.Errorf(errTemplate, path))
|
|
}
|
|
}
|
|
|
|
// ValidateServerTLS checks a server TLS configuration is correct.
|
|
func ValidateServerTLS(config *schema.Configuration, validator *schema.StructValidator) {
|
|
if config.Server.TLS.Key != "" && config.Server.TLS.Certificate == "" {
|
|
validator.Push(fmt.Errorf(errFmtServerTLSCert))
|
|
} else if config.Server.TLS.Key == "" && config.Server.TLS.Certificate != "" {
|
|
validator.Push(fmt.Errorf(errFmtServerTLSKey))
|
|
}
|
|
|
|
if config.Server.TLS.Key != "" {
|
|
validateFileExists(config.Server.TLS.Key, validator, errFmtServerTLSKeyFileDoesNotExist)
|
|
}
|
|
|
|
if config.Server.TLS.Certificate != "" {
|
|
validateFileExists(config.Server.TLS.Certificate, validator, errFmtServerTLSCertFileDoesNotExist)
|
|
}
|
|
|
|
if config.Server.TLS.Key == "" && config.Server.TLS.Certificate == "" &&
|
|
len(config.Server.TLS.ClientCertificates) > 0 {
|
|
validator.Push(fmt.Errorf(errFmtServerTLSClientAuthNoAuth))
|
|
}
|
|
|
|
for _, clientCertPath := range config.Server.TLS.ClientCertificates {
|
|
validateFileExists(clientCertPath, validator, errFmtServerTLSClientAuthCertFileDoesNotExist)
|
|
}
|
|
}
|
|
|
|
// ValidateServer checks a server configuration is correct.
|
|
func ValidateServer(config *schema.Configuration, validator *schema.StructValidator) {
|
|
if config.Server.Host == "" {
|
|
config.Server.Host = schema.DefaultServerConfiguration.Host
|
|
}
|
|
|
|
if config.Server.Port == 0 {
|
|
config.Server.Port = schema.DefaultServerConfiguration.Port
|
|
}
|
|
|
|
ValidateServerTLS(config, validator)
|
|
|
|
switch {
|
|
case strings.Contains(config.Server.Path, "/"):
|
|
validator.Push(fmt.Errorf(errFmtServerPathNoForwardSlashes))
|
|
case !utils.IsStringAlphaNumeric(config.Server.Path):
|
|
validator.Push(fmt.Errorf(errFmtServerPathAlphaNum))
|
|
case config.Server.Path == "": // Don't do anything if it's blank.
|
|
break
|
|
default:
|
|
config.Server.Path = path.Clean("/" + config.Server.Path)
|
|
}
|
|
|
|
if config.Server.Buffers.Read <= 0 {
|
|
config.Server.Buffers.Read = schema.DefaultServerConfiguration.Buffers.Read
|
|
}
|
|
|
|
if config.Server.Buffers.Write <= 0 {
|
|
config.Server.Buffers.Write = schema.DefaultServerConfiguration.Buffers.Write
|
|
}
|
|
|
|
if config.Server.Timeouts.Read <= 0 {
|
|
config.Server.Timeouts.Read = schema.DefaultServerConfiguration.Timeouts.Read
|
|
}
|
|
|
|
if config.Server.Timeouts.Write <= 0 {
|
|
config.Server.Timeouts.Write = schema.DefaultServerConfiguration.Timeouts.Write
|
|
}
|
|
|
|
if config.Server.Timeouts.Idle <= 0 {
|
|
config.Server.Timeouts.Idle = schema.DefaultServerConfiguration.Timeouts.Idle
|
|
}
|
|
}
|