116 lines
3.7 KiB
Go
116 lines
3.7 KiB
Go
package commands
|
|
|
|
import (
|
|
"crypto/x509"
|
|
|
|
"github.com/authelia/authelia/v4/internal/authentication"
|
|
"github.com/authelia/authelia/v4/internal/authorization"
|
|
"github.com/authelia/authelia/v4/internal/metrics"
|
|
"github.com/authelia/authelia/v4/internal/middlewares"
|
|
"github.com/authelia/authelia/v4/internal/notification"
|
|
"github.com/authelia/authelia/v4/internal/ntp"
|
|
"github.com/authelia/authelia/v4/internal/oidc"
|
|
"github.com/authelia/authelia/v4/internal/regulation"
|
|
"github.com/authelia/authelia/v4/internal/session"
|
|
"github.com/authelia/authelia/v4/internal/storage"
|
|
"github.com/authelia/authelia/v4/internal/templates"
|
|
"github.com/authelia/authelia/v4/internal/totp"
|
|
"github.com/authelia/authelia/v4/internal/utils"
|
|
)
|
|
|
|
func getStorageProvider() (provider storage.Provider) {
|
|
switch {
|
|
case config.Storage.Local == nil:
|
|
return getStorageProviderWithPool(nil)
|
|
default:
|
|
caCertPool, _, _ := utils.NewX509CertPool(config.CertificatesDirectory)
|
|
|
|
return getStorageProviderWithPool(caCertPool)
|
|
}
|
|
}
|
|
|
|
func getStorageProviderWithPool(caCertPool *x509.CertPool) (provider storage.Provider) {
|
|
switch {
|
|
case config.Storage.PostgreSQL != nil:
|
|
return storage.NewPostgreSQLProvider(config, caCertPool)
|
|
case config.Storage.MySQL != nil:
|
|
return storage.NewMySQLProvider(config, caCertPool)
|
|
case config.Storage.Local != nil:
|
|
return storage.NewSQLiteProvider(config)
|
|
default:
|
|
return nil
|
|
}
|
|
}
|
|
|
|
func getProviders() (providers middlewares.Providers, warnings []error, errors []error) {
|
|
// TODO: Adjust this so the CertPool can be used like a provider.
|
|
caCertPool, warnings, errors := utils.NewX509CertPool(config.CertificatesDirectory)
|
|
if len(warnings) != 0 || len(errors) != 0 {
|
|
return providers, warnings, errors
|
|
}
|
|
|
|
storageProvider := getStorageProviderWithPool(caCertPool)
|
|
|
|
var (
|
|
userProvider authentication.UserProvider
|
|
err error
|
|
)
|
|
|
|
switch {
|
|
case config.AuthenticationBackend.File != nil:
|
|
userProvider = authentication.NewFileUserProvider(config.AuthenticationBackend.File)
|
|
case config.AuthenticationBackend.LDAP != nil:
|
|
userProvider = authentication.NewLDAPUserProvider(config.AuthenticationBackend, caCertPool)
|
|
}
|
|
|
|
templatesProvider, err := templates.New(templates.Config{EmailTemplatesPath: config.Notifier.TemplatePath})
|
|
if err != nil {
|
|
errors = append(errors, err)
|
|
}
|
|
|
|
var notifier notification.Notifier
|
|
|
|
switch {
|
|
case config.Notifier.SMTP != nil:
|
|
notifier = notification.NewSMTPNotifier(config.Notifier.SMTP, caCertPool, templatesProvider)
|
|
case config.Notifier.FileSystem != nil:
|
|
notifier = notification.NewFileNotifier(*config.Notifier.FileSystem)
|
|
}
|
|
|
|
ntpProvider := ntp.NewProvider(&config.NTP)
|
|
|
|
clock := utils.RealClock{}
|
|
authorizer := authorization.NewAuthorizer(config)
|
|
sessionProvider := session.NewProvider(config.Session, caCertPool)
|
|
regulator := regulation.NewRegulator(config.Regulation, storageProvider, clock)
|
|
|
|
oidcProvider, err := oidc.NewOpenIDConnectProvider(config.IdentityProviders.OIDC, storageProvider)
|
|
if err != nil {
|
|
errors = append(errors, err)
|
|
}
|
|
|
|
totpProvider := totp.NewTimeBasedProvider(config.TOTP)
|
|
|
|
ppolicyProvider := middlewares.NewPasswordPolicyProvider(config.PasswordPolicy)
|
|
|
|
var metricsProvider metrics.Provider
|
|
if config.Telemetry.Metrics.Enabled {
|
|
metricsProvider = metrics.NewPrometheus()
|
|
}
|
|
|
|
return middlewares.Providers{
|
|
Authorizer: authorizer,
|
|
UserProvider: userProvider,
|
|
Regulator: regulator,
|
|
OpenIDConnect: oidcProvider,
|
|
StorageProvider: storageProvider,
|
|
Metrics: metricsProvider,
|
|
NTP: ntpProvider,
|
|
Notifier: notifier,
|
|
SessionProvider: sessionProvider,
|
|
Templates: templatesProvider,
|
|
TOTP: totpProvider,
|
|
PasswordPolicy: ppolicyProvider,
|
|
}, warnings, errors
|
|
}
|