5449cd3d8d
Signing in now starts at the sign-in screen and one button that hands the browser to Go Loose, which returns to the welcome page. Nothing redirects to the identity provider on its own any more: that fired on every anonymous visit and read as a redirect loop rather than as a choice to sign in. The password form remains only where the API reports that Go Loose login is not configured for the host, because otherwise the application is unreachable on a bare localhost. A person's picture is carried through from the Go Loose identity and rendered in the account menu and on the profile page, with their initials as the fallback. Two things make that fallback necessary rather than decorative: Go Loose retires a picture key when a picture is replaced, so a link cached in a browser can be dead, and most people have not uploaded one. The URL is deliberately not persisted locally, since a stored key would keep failing after the picture changed. The account menu is a disclosure rather than a hover menu: a real button with aria-expanded, Escape and outside clicks closing it, and focus returning to the trigger. It is not an ARIA menu, because its actions are a link and a button and menuitem roles would strip the link semantics from one of them for no gain. The account URL of the Go Loose identity is resolved on each sign-in and is read from the live identity provider every time, which is also what makes it correct after a picture change. Depends on the Go Loose revision that serves avatar_url through /connect/userinfo, so the picture URL reaches this application at all.
112 lines
3.3 KiB
Go
112 lines
3.3 KiB
Go
package config
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
type Config struct {
|
|
Address string
|
|
DatabaseURL string
|
|
JWTSecret string
|
|
TokenTTL time.Duration
|
|
MaxUploadMB int64
|
|
FrontendURL string
|
|
RabbitMQURL string
|
|
GoLoose GoLooseConfig
|
|
}
|
|
|
|
type GoLooseConfig struct {
|
|
AuthDomain string
|
|
AppDomain string
|
|
CAFile string
|
|
Tenants map[string]GoLooseTenant
|
|
}
|
|
|
|
type GoLooseTenant struct {
|
|
ClientID string
|
|
ClientSecret string
|
|
}
|
|
|
|
const (
|
|
// DefaultAuthDomain is the Go Loose identity domain used for local
|
|
// development. Production signs in through DefaultProdAuthDomain.
|
|
DefaultAuthDomain = "auth-dev.urpi.be"
|
|
// DefaultProdAuthDomain is the Go Loose identity domain used in production.
|
|
DefaultProdAuthDomain = "auth.urpi.be"
|
|
// DefaultAppDomain is the public application domain used for local
|
|
// development, matching deploy/helm/go-guess/values-dev.yaml.
|
|
DefaultAppDomain = "guess-dev.urpi.be"
|
|
// DefaultProdAppDomain is the public application domain used in production,
|
|
// matching deploy/helm/go-guess/values.yaml.
|
|
DefaultProdAppDomain = "guess.urpi.be"
|
|
)
|
|
|
|
// GoLooseCredentialEnv returns the environment variable names holding the Go
|
|
// Loose client credentials of a tenant.
|
|
func GoLooseCredentialEnv(slug string) (idEnv, secretEnv string) {
|
|
prefix := "GO_LOOSE_" + strings.ToUpper(slug)
|
|
return prefix + "_CLIENT_ID", prefix + "_CLIENT_SECRET"
|
|
}
|
|
|
|
func Load() (Config, error) {
|
|
ttl, err := time.ParseDuration(env("TOKEN_TTL", "8h"))
|
|
if err != nil {
|
|
return Config{}, fmt.Errorf("parse TOKEN_TTL: %w", err)
|
|
}
|
|
maxUploadMB, err := strconv.ParseInt(env("MAX_UPLOAD_MB", "10"), 10, 64)
|
|
if err != nil || maxUploadMB < 1 {
|
|
return Config{}, fmt.Errorf("MAX_UPLOAD_MB must be a positive integer")
|
|
}
|
|
cfg := Config{
|
|
Address: env("ADDRESS", ":8080"),
|
|
DatabaseURL: env("DATABASE_URL", "postgres://go_guess:go_guess@localhost:5432/?sslmode=disable"),
|
|
JWTSecret: os.Getenv("JWT_SECRET"),
|
|
TokenTTL: ttl,
|
|
MaxUploadMB: maxUploadMB,
|
|
FrontendURL: env("FRONTEND_URL", "http://localhost:5173"),
|
|
RabbitMQURL: env("RABBITMQ_URL", "amqp://guest:guest@localhost:5672/"),
|
|
GoLoose: loadGoLoose(),
|
|
}
|
|
if len(cfg.JWTSecret) < 32 {
|
|
return Config{}, fmt.Errorf("JWT_SECRET must contain at least 32 characters")
|
|
}
|
|
return cfg, nil
|
|
}
|
|
|
|
// loadGoLoose reads the Go Loose browser login configuration. Both domains are
|
|
// single host suffixes: a tenant named "nmbs" signs in through
|
|
// https://nmbs.<AuthDomain> and is served from https://nmbs.<AppDomain>.
|
|
//
|
|
// The defaults are the development domains, matching the rest of the local
|
|
// defaults in Load. Production deployments set GO_LOOSE_AUTH_DOMAIN and
|
|
// GO_LOOSE_APP_DOMAIN explicitly (see deploy/helm/go-guess/values.yaml).
|
|
func loadGoLoose() GoLooseConfig {
|
|
cfg := GoLooseConfig{
|
|
AuthDomain: env("GO_LOOSE_AUTH_DOMAIN", DefaultAuthDomain),
|
|
AppDomain: env("GO_LOOSE_APP_DOMAIN", DefaultAppDomain),
|
|
CAFile: os.Getenv("GO_LOOSE_CA_FILE"),
|
|
Tenants: map[string]GoLooseTenant{},
|
|
}
|
|
add := func(slug string) {
|
|
idEnv, secretEnv := GoLooseCredentialEnv(slug)
|
|
id, secret := os.Getenv(idEnv), os.Getenv(secretEnv)
|
|
if id == "" || secret == "" {
|
|
return
|
|
}
|
|
cfg.Tenants[slug] = GoLooseTenant{ClientID: id, ClientSecret: secret}
|
|
}
|
|
add("nmbs")
|
|
add("ypto")
|
|
return cfg
|
|
}
|
|
|
|
func env(key, fallback string) string {
|
|
if value := os.Getenv(key); value != "" {
|
|
return value
|
|
}
|
|
return fallback
|
|
}
|