Initial QSfera import

2026-06-07 10:20:04 +03:00
commit 2315f25754
16485 changed files with 4826827 additions and 0 deletions
@@ -0,0 +1,91 @@
+package revaconfig
+
+import (
+	"github.com/qsfera/server/services/groups/pkg/config"
+)
+
+// GroupsConfigFromStruct will adapt a КуСфера config struct into a reva mapstructure to start a reva service.
+func GroupsConfigFromStruct(cfg *config.Config) map[string]any {
+	return map[string]any{
+		"shared": map[string]any{
+			"jwt_secret":                cfg.TokenManager.JWTSecret,
+			"gatewaysvc":                cfg.Reva.Address,
+			"skip_user_groups_in_token": cfg.SkipUserGroupsInToken,
+			"grpc_client_options":       cfg.Reva.GetGRPCClientConfig(),
+			"multi_tenant_enabled":      cfg.Commons.MultiTenantEnabled,
+		},
+		"grpc": map[string]any{
+			"network": cfg.GRPC.Protocol,
+			"address": cfg.GRPC.Addr,
+			"tls_settings": map[string]any{
+				"enabled":     cfg.GRPC.TLS.Enabled,
+				"certificate": cfg.GRPC.TLS.Cert,
+				"key":         cfg.GRPC.TLS.Key,
+			},
+			// TODO build services dynamically
+			"services": map[string]any{
+				"groupprovider": map[string]any{
+					"driver": cfg.Driver,
+					"drivers": map[string]any{
+						"json": map[string]any{
+							"groups": cfg.Drivers.JSON.File,
+						},
+						"ldap": ldapConfigFromString(cfg.Drivers.LDAP),
+						"rest": map[string]any{
+							"client_id":           cfg.Drivers.REST.ClientID,
+							"client_secret":       cfg.Drivers.REST.ClientSecret,
+							"redis_address":       cfg.Drivers.REST.RedisAddr,
+							"redis_username":      cfg.Drivers.REST.RedisUsername,
+							"redis_password":      cfg.Drivers.REST.RedisPassword,
+							"id_provider":         cfg.Drivers.REST.IDProvider,
+							"api_base_url":        cfg.Drivers.REST.APIBaseURL,
+							"oidc_token_endpoint": cfg.Drivers.REST.OIDCTokenEndpoint,
+							"target_api":          cfg.Drivers.REST.TargetAPI,
+						},
+					},
+				},
+			},
+			"interceptors": map[string]any{
+				"prometheus": map[string]any{
+					"namespace": "qsfera",
+					"subsystem": "groups",
+				},
+			},
+		},
+	}
+}
+
+func ldapConfigFromString(cfg config.LDAPDriver) map[string]any {
+	return map[string]any{
+		"uri":                         cfg.URI,
+		"cacert":                      cfg.CACert,
+		"insecure":                    cfg.Insecure,
+		"bind_username":               cfg.BindDN,
+		"bind_password":               cfg.BindPassword,
+		"user_base_dn":                cfg.UserBaseDN,
+		"group_base_dn":               cfg.GroupBaseDN,
+		"user_scope":                  cfg.UserScope,
+		"group_scope":                 cfg.GroupScope,
+		"group_substring_filter_type": cfg.GroupSubstringFilterType,
+		"user_filter":                 cfg.UserFilter,
+		"group_filter":                cfg.GroupFilter,
+		"user_objectclass":            cfg.UserObjectClass,
+		"group_objectclass":           cfg.GroupObjectClass,
+		"idp":                         cfg.IDP,
+		"user_schema": map[string]any{
+			"id":              cfg.UserSchema.ID,
+			"idIsOctetString": cfg.UserSchema.IDIsOctetString,
+			"mail":            cfg.UserSchema.Mail,
+			"displayName":     cfg.UserSchema.DisplayName,
+			"userName":        cfg.UserSchema.Username,
+		},
+		"group_schema": map[string]any{
+			"id":              cfg.GroupSchema.ID,
+			"idIsOctetString": cfg.GroupSchema.IDIsOctetString,
+			"mail":            cfg.GroupSchema.Mail,
+			"displayName":     cfg.GroupSchema.DisplayName,
+			"groupName":       cfg.GroupSchema.Groupname,
+			"member":          cfg.GroupSchema.Member,
+		},
+	}
+}