/
keys.go
359 lines (357 loc) · 15.2 KB
/
keys.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
// Code generated by go generate. DO NOT EDIT.
//
// Run the following command to generate this file:
// go run ./cmd/authelia-gen code keys
//
package schema
// Keys is a list of valid schema keys detected by reflecting over a schema.Configuration struct.
var Keys = []string{
"theme",
"certificates_directory",
"default_2fa_method",
"log.level",
"log.format",
"log.file_path",
"log.keep_stdout",
"identity_providers.oidc.hmac_secret",
"identity_providers.oidc.jwks",
"identity_providers.oidc.jwks[].key_id",
"identity_providers.oidc.jwks[].use",
"identity_providers.oidc.jwks[].algorithm",
"identity_providers.oidc.jwks[].key",
"identity_providers.oidc.jwks[].certificate_chain",
"identity_providers.oidc.enable_client_debug_messages",
"identity_providers.oidc.minimum_parameter_entropy",
"identity_providers.oidc.enforce_pkce",
"identity_providers.oidc.enable_pkce_plain_challenge",
"identity_providers.oidc.enable_jwt_access_token_stateless_introspection",
"identity_providers.oidc.discovery_signed_response_alg",
"identity_providers.oidc.discovery_signed_response_key_id",
"identity_providers.oidc.require_pushed_authorization_requests",
"identity_providers.oidc.cors.endpoints",
"identity_providers.oidc.cors.allowed_origins",
"identity_providers.oidc.cors.allowed_origins_from_client_redirect_uris",
"identity_providers.oidc.clients",
"identity_providers.oidc.clients[].client_id",
"identity_providers.oidc.clients[].client_name",
"identity_providers.oidc.clients[].client_secret",
"identity_providers.oidc.clients[].sector_identifier_uri",
"identity_providers.oidc.clients[].public",
"identity_providers.oidc.clients[].redirect_uris",
"identity_providers.oidc.clients[].request_uris",
"identity_providers.oidc.clients[].audience",
"identity_providers.oidc.clients[].scopes",
"identity_providers.oidc.clients[].grant_types",
"identity_providers.oidc.clients[].response_types",
"identity_providers.oidc.clients[].response_modes",
"identity_providers.oidc.clients[].authorization_policy",
"identity_providers.oidc.clients[].lifespan",
"identity_providers.oidc.clients[].requested_audience_mode",
"identity_providers.oidc.clients[].consent_mode",
"identity_providers.oidc.clients[].pre_configured_consent_duration",
"identity_providers.oidc.clients[].require_pushed_authorization_requests",
"identity_providers.oidc.clients[].require_pkce",
"identity_providers.oidc.clients[].pkce_challenge_method",
"identity_providers.oidc.clients[].authorization_signed_response_alg",
"identity_providers.oidc.clients[].authorization_signed_response_key_id",
"identity_providers.oidc.clients[].id_token_signed_response_alg",
"identity_providers.oidc.clients[].id_token_signed_response_key_id",
"identity_providers.oidc.clients[].access_token_signed_response_alg",
"identity_providers.oidc.clients[].access_token_signed_response_key_id",
"identity_providers.oidc.clients[].userinfo_signed_response_alg",
"identity_providers.oidc.clients[].userinfo_signed_response_key_id",
"identity_providers.oidc.clients[].introspection_signed_response_alg",
"identity_providers.oidc.clients[].introspection_signed_response_key_id",
"identity_providers.oidc.clients[].request_object_signing_alg",
"identity_providers.oidc.clients[].token_endpoint_auth_signing_alg",
"identity_providers.oidc.clients[].token_endpoint_auth_method",
"identity_providers.oidc.clients[].allow_multiple_auth_methods",
"identity_providers.oidc.clients[].jwks_uri",
"identity_providers.oidc.clients[].jwks",
"identity_providers.oidc.clients[].jwks[].key_id",
"identity_providers.oidc.clients[].jwks[].use",
"identity_providers.oidc.clients[].jwks[].algorithm",
"identity_providers.oidc.clients[].jwks[].key",
"identity_providers.oidc.clients[].jwks[].certificate_chain",
"identity_providers.oidc.clients[]",
"identity_providers.oidc.authorization_policies",
"identity_providers.oidc.authorization_policies.*.default_policy",
"identity_providers.oidc.authorization_policies.*.rules",
"identity_providers.oidc.authorization_policies.*.rules[].policy",
"identity_providers.oidc.authorization_policies.*.rules[].subject",
"identity_providers.oidc.lifespans.access_token",
"identity_providers.oidc.lifespans.authorize_code",
"identity_providers.oidc.lifespans.id_token",
"identity_providers.oidc.lifespans.refresh_token",
"identity_providers.oidc.lifespans.jwt_secured_authorization",
"identity_providers.oidc.lifespans.custom",
"identity_providers.oidc.lifespans.custom.*.access_token",
"identity_providers.oidc.lifespans.custom.*.authorize_code",
"identity_providers.oidc.lifespans.custom.*.id_token",
"identity_providers.oidc.lifespans.custom.*.refresh_token",
"identity_providers.oidc.lifespans.custom.*.grants.authorize_code.access_token",
"identity_providers.oidc.lifespans.custom.*.grants.authorize_code.authorize_code",
"identity_providers.oidc.lifespans.custom.*.grants.authorize_code.id_token",
"identity_providers.oidc.lifespans.custom.*.grants.authorize_code.refresh_token",
"identity_providers.oidc.lifespans.custom.*.grants.implicit.access_token",
"identity_providers.oidc.lifespans.custom.*.grants.implicit.authorize_code",
"identity_providers.oidc.lifespans.custom.*.grants.implicit.id_token",
"identity_providers.oidc.lifespans.custom.*.grants.implicit.refresh_token",
"identity_providers.oidc.lifespans.custom.*.grants.client_credentials.access_token",
"identity_providers.oidc.lifespans.custom.*.grants.client_credentials.authorize_code",
"identity_providers.oidc.lifespans.custom.*.grants.client_credentials.id_token",
"identity_providers.oidc.lifespans.custom.*.grants.client_credentials.refresh_token",
"identity_providers.oidc.lifespans.custom.*.grants.refresh_token.access_token",
"identity_providers.oidc.lifespans.custom.*.grants.refresh_token.authorize_code",
"identity_providers.oidc.lifespans.custom.*.grants.refresh_token.id_token",
"identity_providers.oidc.lifespans.custom.*.grants.refresh_token.refresh_token",
"identity_providers.oidc.lifespans.custom.*.grants.jwt_bearer.access_token",
"identity_providers.oidc.lifespans.custom.*.grants.jwt_bearer.authorize_code",
"identity_providers.oidc.lifespans.custom.*.grants.jwt_bearer.id_token",
"identity_providers.oidc.lifespans.custom.*.grants.jwt_bearer.refresh_token",
"identity_providers.oidc",
"identity_providers.oidc.issuer_certificate_chain",
"identity_providers.oidc.issuer_private_key",
"authentication_backend.password_reset.disable",
"authentication_backend.password_reset.custom_url",
"authentication_backend.refresh_interval",
"authentication_backend.file.path",
"authentication_backend.file.watch",
"authentication_backend.file.password.algorithm",
"authentication_backend.file.password.argon2.variant",
"authentication_backend.file.password.argon2.iterations",
"authentication_backend.file.password.argon2.memory",
"authentication_backend.file.password.argon2.parallelism",
"authentication_backend.file.password.argon2.key_length",
"authentication_backend.file.password.argon2.salt_length",
"authentication_backend.file.password.sha2crypt.variant",
"authentication_backend.file.password.sha2crypt.iterations",
"authentication_backend.file.password.sha2crypt.salt_length",
"authentication_backend.file.password.pbkdf2.variant",
"authentication_backend.file.password.pbkdf2.iterations",
"authentication_backend.file.password.pbkdf2.salt_length",
"authentication_backend.file.password.bcrypt.variant",
"authentication_backend.file.password.bcrypt.cost",
"authentication_backend.file.password.scrypt.iterations",
"authentication_backend.file.password.scrypt.block_size",
"authentication_backend.file.password.scrypt.parallelism",
"authentication_backend.file.password.scrypt.key_length",
"authentication_backend.file.password.scrypt.salt_length",
"authentication_backend.file.password.iterations",
"authentication_backend.file.password.memory",
"authentication_backend.file.password.parallelism",
"authentication_backend.file.password.key_length",
"authentication_backend.file.password.salt_length",
"authentication_backend.file.search.email",
"authentication_backend.file.search.case_insensitive",
"authentication_backend.ldap.address",
"authentication_backend.ldap.implementation",
"authentication_backend.ldap.timeout",
"authentication_backend.ldap.start_tls",
"authentication_backend.ldap.tls.minimum_version",
"authentication_backend.ldap.tls.maximum_version",
"authentication_backend.ldap.tls.skip_verify",
"authentication_backend.ldap.tls.server_name",
"authentication_backend.ldap.tls.private_key",
"authentication_backend.ldap.tls.certificate_chain",
"authentication_backend.ldap.base_dn",
"authentication_backend.ldap.additional_users_dn",
"authentication_backend.ldap.users_filter",
"authentication_backend.ldap.additional_groups_dn",
"authentication_backend.ldap.groups_filter",
"authentication_backend.ldap.group_search_mode",
"authentication_backend.ldap.attributes.distinguished_name",
"authentication_backend.ldap.attributes.username",
"authentication_backend.ldap.attributes.display_name",
"authentication_backend.ldap.attributes.mail",
"authentication_backend.ldap.attributes.member_of",
"authentication_backend.ldap.attributes.group_name",
"authentication_backend.ldap.permit_referrals",
"authentication_backend.ldap.permit_unauthenticated_bind",
"authentication_backend.ldap.permit_feature_detection_failure",
"authentication_backend.ldap.user",
"authentication_backend.ldap.password",
"session.name",
"session.same_site",
"session.expiration",
"session.inactivity",
"session.remember_me",
"session",
"session.secret",
"session.cookies",
"session.cookies[].name",
"session.cookies[].same_site",
"session.cookies[].expiration",
"session.cookies[].inactivity",
"session.cookies[].remember_me",
"session.cookies[]",
"session.cookies[].domain",
"session.cookies[].authelia_url",
"session.cookies[].default_redirection_url",
"session.cookies[]",
"session.redis.host",
"session.redis.port",
"session.redis.username",
"session.redis.password",
"session.redis.database_index",
"session.redis.maximum_active_connections",
"session.redis.minimum_idle_connections",
"session.redis.tls.minimum_version",
"session.redis.tls.maximum_version",
"session.redis.tls.skip_verify",
"session.redis.tls.server_name",
"session.redis.tls.private_key",
"session.redis.tls.certificate_chain",
"session.redis.high_availability.sentinel_name",
"session.redis.high_availability.sentinel_username",
"session.redis.high_availability.sentinel_password",
"session.redis.high_availability.route_by_latency",
"session.redis.high_availability.route_randomly",
"session.redis.high_availability.nodes",
"session.redis.high_availability.nodes[].host",
"session.redis.high_availability.nodes[].port",
"session.domain",
"totp.disable",
"totp.issuer",
"totp.algorithm",
"totp.digits",
"totp.period",
"totp.skew",
"totp.secret_size",
"totp.allowed_algorithms",
"totp.allowed_digits",
"totp.allowed_periods",
"totp.disable_reuse_security_policy",
"duo_api.disable",
"duo_api.hostname",
"duo_api.integration_key",
"duo_api.secret_key",
"duo_api.enable_self_enrollment",
"access_control.default_policy",
"access_control.networks",
"access_control.networks[].name",
"access_control.networks[].networks",
"access_control.rules",
"access_control.rules[].domain",
"access_control.rules[].domain_regex",
"access_control.rules[].policy",
"access_control.rules[].subject",
"access_control.rules[].networks",
"access_control.rules[].resources",
"access_control.rules[].methods",
"access_control.rules[].query[][].operator",
"access_control.rules[].query[][].key",
"access_control.rules[].query[][].value",
"access_control.rules[].query",
"ntp.address",
"ntp.version",
"ntp.max_desync",
"ntp.disable_startup_check",
"ntp.disable_failure",
"regulation.max_retries",
"regulation.find_time",
"regulation.ban_time",
"storage.local.path",
"storage.mysql.address",
"storage.mysql.database",
"storage.mysql.username",
"storage.mysql.password",
"storage.mysql.timeout",
"storage.mysql.tls.minimum_version",
"storage.mysql.tls.maximum_version",
"storage.mysql.tls.skip_verify",
"storage.mysql.tls.server_name",
"storage.mysql.tls.private_key",
"storage.mysql.tls.certificate_chain",
"storage.postgres.address",
"storage.postgres.database",
"storage.postgres.username",
"storage.postgres.password",
"storage.postgres.timeout",
"storage.postgres.schema",
"storage.postgres.tls.minimum_version",
"storage.postgres.tls.maximum_version",
"storage.postgres.tls.skip_verify",
"storage.postgres.tls.server_name",
"storage.postgres.tls.private_key",
"storage.postgres.tls.certificate_chain",
"storage.postgres.ssl.mode",
"storage.postgres.ssl.root_certificate",
"storage.postgres.ssl.certificate",
"storage.postgres.ssl.key",
"storage.encryption_key",
"notifier.disable_startup_check",
"notifier.filesystem.filename",
"notifier.smtp.address",
"notifier.smtp.timeout",
"notifier.smtp.username",
"notifier.smtp.password",
"notifier.smtp.identifier",
"notifier.smtp.sender",
"notifier.smtp.subject",
"notifier.smtp.startup_check_address",
"notifier.smtp.disable_require_tls",
"notifier.smtp.disable_html_emails",
"notifier.smtp.disable_starttls",
"notifier.smtp.tls.minimum_version",
"notifier.smtp.tls.maximum_version",
"notifier.smtp.tls.skip_verify",
"notifier.smtp.tls.server_name",
"notifier.smtp.tls.private_key",
"notifier.smtp.tls.certificate_chain",
"notifier.smtp.host",
"notifier.smtp.port",
"notifier.template_path",
"server.address",
"server.asset_path",
"server.disable_healthcheck",
"server.tls.certificate",
"server.tls.key",
"server.tls.client_certificates",
"server.headers.csp_template",
"server.endpoints.enable_pprof",
"server.endpoints.enable_expvars",
"server.endpoints.authz",
"server.endpoints.authz.*.implementation",
"server.endpoints.authz.*.authn_strategies",
"server.endpoints.authz.*.authn_strategies[].name",
"server.endpoints.authz.*.authn_strategies[].schemes",
"server.buffers.read",
"server.buffers.write",
"server.timeouts.read",
"server.timeouts.write",
"server.timeouts.idle",
"telemetry.metrics.enabled",
"telemetry.metrics.address",
"telemetry.metrics.buffers.read",
"telemetry.metrics.buffers.write",
"telemetry.metrics.timeouts.read",
"telemetry.metrics.timeouts.write",
"telemetry.metrics.timeouts.idle",
"webauthn.disable",
"webauthn.display_name",
"webauthn.attestation_conveyance_preference",
"webauthn.user_verification",
"webauthn.timeout",
"password_policy.standard.enabled",
"password_policy.standard.min_length",
"password_policy.standard.max_length",
"password_policy.standard.require_uppercase",
"password_policy.standard.require_lowercase",
"password_policy.standard.require_number",
"password_policy.standard.require_special",
"password_policy.zxcvbn.enabled",
"password_policy.zxcvbn.min_score",
"privacy_policy.enabled",
"privacy_policy.require_user_acceptance",
"privacy_policy.policy_url",
"identity_validation.reset_password.jwt_lifespan",
"identity_validation.reset_password.jwt_algorithm",
"identity_validation.reset_password.jwt_secret",
"identity_validation.elevated_session.code_lifespan",
"identity_validation.elevated_session.elevation_lifespan",
"identity_validation.elevated_session.characters",
"identity_validation.elevated_session.require_second_factor",
"identity_validation.elevated_session.skip_second_factor",
"default_redirection_url",
}