-
Notifications
You must be signed in to change notification settings - Fork 280
/
options.go
231 lines (202 loc) · 5.87 KB
/
options.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
package oidc
import (
"crypto/x509"
"net/url"
"github.com/hashicorp/boundary/internal/db"
)
// getOpts - iterate the inbound Options and return a struct.
func getOpts(opt ...Option) options {
opts := getDefaultOptions()
for _, o := range opt {
o(&opts)
}
return opts
}
// Option - how Options are passed as arguments.
type Option func(*options)
// options = how options are represented
type options struct {
withName string
withDescription string
withLimit int
withMaxAge int
withApiUrl *url.URL
withCertificates []*x509.Certificate
withAudClaims []string
withSigningAlgs []Alg
withClaimsScopes []string
withEmail string
withFullName string
withOrderByCreateTime bool
ascending bool
withUnauthenticatedUser bool
withForce bool
withDryRun bool
withAuthMethod *AuthMethod
withPublicId string
withRoundtripPayload string
withKeyId string
withIssuer *url.URL
withOperationalState AuthMethodState
withAccountClaimMap map[string]AccountToClaim
withReader db.Reader
}
func getDefaultOptions() options {
return options{
withOperationalState: InactiveState,
}
}
// WithDescription provides an optional description.
func WithDescription(desc string) Option {
return func(o *options) {
o.withDescription = desc
}
}
// WithName provides an optional name.
func WithName(name string) Option {
return func(o *options) {
o.withName = name
}
}
// WithLimit provides an option to provide a limit. Intentionally allowing
// negative integers. If WithLimit < 0, then unlimited results are returned.
// If WithLimit == 0, then default limits are used for results.
func WithLimit(l int) Option {
return func(o *options) {
o.withLimit = l
}
}
// WithMaxAge provides an optional max age. Specifies the allowable elapsed
// time in seconds since the last time the End-User was actively authenticated
// by the OP. If the elapsed time is greater than this value, the OP MUST
// attempt to actively re-authenticate the End-User. A value -1 basically
// forces the IdP to re-authenticate the End-User. Zero is not a valid value.
//
// see: https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
func WithMaxAge(max int) Option {
return func(o *options) {
o.withMaxAge = max
}
}
// WithApiUrl provides optional api URL to use in the various
func WithApiUrl(urls *url.URL) Option {
return func(o *options) {
o.withApiUrl = urls
}
}
// WithCertificates provides optional certificates.
func WithCertificates(certs ...*x509.Certificate) Option {
return func(o *options) {
o.withCertificates = certs
}
}
// WithAudClaims provides optional audience claims
func WithAudClaims(aud ...string) Option {
return func(o *options) {
o.withAudClaims = aud
}
}
// WithSigningAlgs provides optional signing algorithms
func WithSigningAlgs(alg ...Alg) Option {
return func(o *options) {
o.withSigningAlgs = alg
}
}
// WithClaimsScopes provides optional claims scopes
func WithClaimsScopes(claimsScope ...string) Option {
return func(o *options) {
o.withClaimsScopes = claimsScope
}
}
// WithEmail provides an optional email address for the account.
func WithEmail(email string) Option {
return func(o *options) {
o.withEmail = email
}
}
// WithFullName provides an optional full name for the account.
func WithFullName(n string) Option {
return func(o *options) {
o.withFullName = n
}
}
// WithOrderByCreateTime provides an option to specify ordering by the
// CreateTime field.
func WithOrderByCreateTime(ascending bool) Option {
return func(o *options) {
o.withOrderByCreateTime = true
o.ascending = ascending
}
}
// WithUnauthenticatedUser provides an option for filtering results for
// an unauthenticated users.
func WithUnauthenticatedUser(enabled bool) Option {
return func(o *options) {
o.withUnauthenticatedUser = enabled
}
}
// WithForce provides an option to force the write operation, regardless of
// whether or not it's pre-verification succeeds.
func WithForce() Option {
return func(o *options) {
o.withForce = true
}
}
// WithDryRun provides an option to do a "dry run" of a write operation, which
// will run verification steps and return any errors, but will not persist the
// data into the repository.
func WithDryRun() Option {
return func(o *options) {
o.withDryRun = true
}
}
// WithAuthMethod provides an option for passing an AuthMethod to the operation
func WithAuthMethod(am *AuthMethod) Option {
return func(o *options) {
o.withAuthMethod = am
}
}
// WithPublicId provides an option for passing a public id to the operation
func WithPublicId(publicId string) Option {
return func(o *options) {
o.withPublicId = publicId
}
}
// WithRoundTripPayload provides an option for passing an payload to be
// roundtripped during an authentication process.
func WithRoundtripPayload(payload string) Option {
return func(o *options) {
o.withRoundtripPayload = payload
}
}
// WithKeyId provides an option for specifying a key id.
func WithKeyId(id string) Option {
return func(o *options) {
o.withKeyId = id
}
}
// WithIssuer provides an option for specifying an issuer.
func WithIssuer(iss *url.URL) Option {
return func(o *options) {
o.withIssuer = iss
}
}
// WithOperationalState provides an option for specifying an issuer.
func WithOperationalState(state AuthMethodState) Option {
return func(o *options) {
o.withOperationalState = state
}
}
// WithAccountClaimMap provides an option for specifying an Account Claim map.
func WithAccountClaimMap(acm map[string]AccountToClaim) Option {
return func(o *options) {
o.withAccountClaimMap = acm
}
}
// WithReader provides an option for specifying a reader to use for the
// operation.
func WithReader(reader db.Reader) Option {
return func(o *options) {
o.withReader = reader
}
}