mirror of
https://github.com/yusing/godoxy.git
synced 2026-02-24 09:44:58 +01:00
53f3397b7a
* Add comprehensive post-request rules support for response phase * Enable response body, status, and header manipulation via set commands * Refactor command handlers to support both request and response phases * Implement response modifier system for post-request template execution * Support response-based rule matching with status and header checks * Add comprehensive benchmarks for matcher performance * Refactor authentication and proxying commands for unified error handling * Support negated conditions with ! * Enhance error handling, error formatting and validation * Routes: add `rule_file` field with rule preset support * Environment variable substitution: now supports variables without `GODOXY_` prefix * new conditions: * `on resp_header <key> [<value>]` * `on status <status>` * new commands: * `require_auth` * `set resp_header <key> <template>` * `set resp_body <template>` * `set status <code>` * `log <level> <path> <template>` * `notify <level> <provider> <title_template> <body_template>`
71 lines
1.3 KiB
Go
71 lines
1.3 KiB
Go
package auth
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/yusing/godoxy/internal/common"
|
|
)
|
|
|
|
var defaultAuth Provider
|
|
|
|
// Initialize sets up authentication providers.
|
|
func Initialize() error {
|
|
if !IsEnabled() {
|
|
return nil
|
|
}
|
|
|
|
var err error
|
|
// Initialize OIDC if configured.
|
|
if common.OIDCIssuerURL != "" {
|
|
defaultAuth, err = NewOIDCProviderFromEnv()
|
|
} else {
|
|
defaultAuth, err = NewUserPassAuthFromEnv()
|
|
}
|
|
|
|
return err
|
|
}
|
|
|
|
func GetDefaultAuth() Provider {
|
|
return defaultAuth
|
|
}
|
|
|
|
func IsEnabled() bool {
|
|
return !common.DebugDisableAuth && (common.APIJWTSecret != nil || IsOIDCEnabled())
|
|
}
|
|
|
|
func IsOIDCEnabled() bool {
|
|
return common.OIDCIssuerURL != ""
|
|
}
|
|
|
|
type nextHandler struct{}
|
|
|
|
var nextHandlerContextKey = nextHandler{}
|
|
|
|
func ProceedNext(w http.ResponseWriter, r *http.Request) {
|
|
next, ok := r.Context().Value(nextHandlerContextKey).(http.HandlerFunc)
|
|
if ok {
|
|
next(w, r)
|
|
} else {
|
|
w.WriteHeader(http.StatusOK)
|
|
}
|
|
}
|
|
|
|
func AuthCheckHandler(w http.ResponseWriter, r *http.Request) {
|
|
err := defaultAuth.CheckToken(r)
|
|
if err != nil {
|
|
defaultAuth.LoginHandler(w, r)
|
|
} else {
|
|
w.WriteHeader(http.StatusOK)
|
|
}
|
|
}
|
|
|
|
func AuthOrProceed(w http.ResponseWriter, r *http.Request) (proceed bool) {
|
|
err := defaultAuth.CheckToken(r)
|
|
if err != nil {
|
|
defaultAuth.LoginHandler(w, r)
|
|
return false
|
|
} else {
|
|
return true
|
|
}
|
|
}
|