Integreate konnectd library #8

2020-01-28 16:19:32 +01:00
parent 046fec2033
commit 89af83ea46
55 changed files with 798 additions and 45 deletions
@@ -134,5 +134,153 @@ func ServerWithConfig(cfg *config.Config) []cli.Flag {
 			EnvVar:      "KONNECTD_HTTP_NAMESPACE",
 			Destination: &cfg.HTTP.Namespace,
 		},
+		&cli.StringFlag{
+			Name:        "identity-manager",
+			Value:       "ldap",
+			Usage:       "Identity manager (one of ldap,kc,cookie,dummy)",
+			EnvVar:      "KONNECTD_IDENTITY_MANAGER",
+			Destination: &cfg.Konnectd.IdentityManager,
+		},
+		&cli.StringFlag{
+			Name:        "transport-tls-cert",
+			Value:       "",
+			Usage:       "Certificate file for transport encryption",
+			EnvVar:      "KONNECTD_TRANSPORT_TLS_CERT",
+			Destination: &cfg.HTTP.TLSCert,
+		},
+		&cli.StringFlag{
+			Name:        "transport- tls-key",
+			Value:       "",
+			Usage:       "Secret file for transport encryption",
+			EnvVar:      "KONNECTD_TRANSPORT_TLS_KEY",
+			Destination: &cfg.HTTP.TLSKey,
+		},
+		&cli.StringFlag{
+			Name:        "iss",
+			Usage:       "OIDC issuer URL",
+			EnvVar:      "KONNECTD_ISS",
+			Value:       "https://127.0.0.1:9130",
+			Destination: &cfg.Konnectd.ISS,
+		},
+		&cli.StringSliceFlag{
+			Name:   "signing-private-key",
+			Usage:  "Full path to PEM encoded private key file (must match the --signing-method algorithm)",
+			EnvVar: "KONNECTD_SIGNING_PRIVATE_KEY",
+			Value:  nil,
+		},
+		&cli.StringFlag{
+			Name:        "signing-kid",
+			Usage:       "Value of kid field to use in created tokens (uniquely identifying the signing-private-key)",
+			EnvVar:      "KONNECTD_SIGNING_KID",
+			Value:       "",
+			Destination: &cfg.Konnectd.SigningKid,
+		},
+		&cli.StringFlag{
+			Name:        "validation-keys-path",
+			Usage:       "Full path to a folder containg PEM encoded private or public key files used for token validaton (file name without extension is used as kid)",
+			EnvVar:      "KONNECTD_VALIDATION_KEYS_PATH",
+			Value:       "",
+			Destination: &cfg.Konnectd.ValidationKeysPath,
+		},
+		&cli.StringFlag{
+			Name:        "encryption-secret",
+			Usage:       "Full path to a file containing a %d bytes secret key",
+			EnvVar:      "KONNECTD_ENCRYPTION_SECRET",
+			Value:       "",
+			Destination: &cfg.Konnectd.EncryptionSecretFile,
+		},
+		&cli.StringFlag{
+			Name:        "signing-method",
+			Usage:       "JWT default signing method",
+			EnvVar:      "KONNECTD_SIGNING_METHOD",
+			Value:       "PS256",
+			Destination: &cfg.Konnectd.SigningMethod,
+		},
+		&cli.StringFlag{
+			Name:        "uri-base-path",
+			Usage:       "Custom base path for URI endpoints",
+			EnvVar:      "KONNECTD_URI_BASE_PATH",
+			Value:       "",
+			Destination: &cfg.Konnectd.URIBasePath,
+		},
+		&cli.StringFlag{
+			Name:        "sign-in-uri",
+			Usage:       "Custom redirection URI to sign-in form",
+			EnvVar:      "KONNECTD_SIGN_IN_URI",
+			Value:       "",
+			Destination: &cfg.Konnectd.SignInUri,
+		},
+		&cli.StringFlag{
+			Name:        "signed-out-uri",
+			Usage:       "Custom redirection URI to signed-out goodbye page",
+			EnvVar:      "KONNECTD_SIGN_OUT_URI",
+			Value:       "",
+			Destination: &cfg.Konnectd.SignedOutUri,
+		},
+		&cli.StringFlag{
+			Name:        "authorization-endpoint-uri",
+			Usage:       "Custom authorization endpoint URI",
+			EnvVar:      "KONNECTD_ENDPOINT_URI",
+			Value:       "",
+			Destination: &cfg.Konnectd.AuthorizationEndpointURI,
+		},
+		&cli.StringFlag{
+			Name:        "endsession-endpoint-uri",
+			Usage:       "Custom endsession endpoint URI",
+			EnvVar:      "KONNECTD_ENDSESSION_ENDPOINT_URI",
+			Value:       "",
+			Destination: &cfg.Konnectd.EndsessionEndpointURI,
+		},
+		&cli.StringFlag{
+			Name:        "identifier-client-path",
+			Usage:       "Path to the identifier web client base folder",
+			EnvVar:      "KONNECTD_IDENTIFIER_CLIENT_PATH",
+			Value:       "./identifier-webapp",
+			Destination: &cfg.Konnectd.IdentifierClientPath,
+		},
+		&cli.StringFlag{
+			Name:        "identifier-registration-conf",
+			Usage:       "Path to a identifier-registration.yaml configuration file",
+			EnvVar:      "KONNECTD_IDENTIFIER_REGISTRATION_CONF",
+			Value:       "./identifier-registration.yaml",
+			Destination: &cfg.Konnectd.IdentifierRegistrationConf,
+		},
+		&cli.StringFlag{
+			Name:        "identifier-scopes-conf",
+			Usage:       "Path to a scopes.yaml configuration file",
+			EnvVar:      "KONNECTD_IDENTIFIER_SCOPES_CONF",
+			Value:       "",
+			Destination: &cfg.Konnectd.IdentifierScopesConf,
+		},
+		&cli.BoolFlag{
+			Name:        "insecure",
+			Usage:       "Disable TLS certificate and hostname validation",
+			EnvVar:      "KONNECTD_INSECURE",
+			Destination: &cfg.Konnectd.Insecure,
+		},
+		&cli.StringSliceFlag{
+			Name:   "trusted-proxy",
+			Usage:  "Trusted proxy IP or IP network (can be used multiple times)",
+			EnvVar: "KONNECTD_TRUSTED_PROXY",
+			Value:  nil,
+		},
+		&cli.StringSliceFlag{
+			Name:   "allow-scope",
+			Usage:  "Allow OAuth 2 scope (can be used multiple times, if not set default scopes are allowed)",
+			EnvVar: "KONNECTD_ALLOW_SCOPE",
+			Value:  nil,
+		},
+		&cli.BoolFlag{
+			Name:        "allow-client-guests",
+			Usage:       "Allow sign in of client controlled guest users",
+			EnvVar:      "KONNECTD_ALLOW_CLIENT_GUESTS",
+			Destination: &cfg.Konnectd.AllowClientGuests,
+		},
+		&cli.BoolFlag{
+			Name:        "allow-dynamic-client-registration",
+			Usage:       "Allow dynamic OAuth2 client registration",
+			EnvVar:      "KONNECTD_ALLOW_DYNAMIC_CLIENT_REGISTRATION",
+			Destination: &cfg.Konnectd.AllowDynamicClientRegistration,
+		},
 	}
 }