Jeff Mitchell
a9e372930d
Post-merge some issues were discovered with the ways typing is used for proto reflection. This will be reworked without moving the subtypes around.
61 lines
1.6 KiB
Go
61 lines
1.6 KiB
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package oidc
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/hashicorp/boundary/globals"
|
|
"github.com/hashicorp/boundary/internal/auth"
|
|
"github.com/hashicorp/boundary/internal/db"
|
|
"github.com/hashicorp/boundary/internal/errors"
|
|
"github.com/hashicorp/boundary/internal/types/subtypes"
|
|
)
|
|
|
|
func init() {
|
|
if err := subtypes.Register(auth.Domain, Subtype, globals.OidcAuthMethodPrefix, globals.OidcAccountPrefix, globals.OidcManagedGroupPrefix); err != nil {
|
|
panic(err)
|
|
}
|
|
}
|
|
|
|
const (
|
|
Subtype = subtypes.Subtype("oidc")
|
|
)
|
|
|
|
func newAuthMethodId(ctx context.Context) (string, error) {
|
|
const op = "oidc.newAuthMethodId"
|
|
id, err := db.NewPublicId(ctx, globals.OidcAuthMethodPrefix)
|
|
if err != nil {
|
|
return "", errors.Wrap(ctx, err, op)
|
|
}
|
|
return id, nil
|
|
}
|
|
|
|
func newAccountId(ctx context.Context, authMethodId, issuer, sub string) (string, error) {
|
|
const op = "oidc.newAccountId"
|
|
if authMethodId == "" {
|
|
return "", errors.New(ctx, errors.InvalidParameter, op, "missing auth method id")
|
|
}
|
|
if issuer == "" {
|
|
return "", errors.New(ctx, errors.InvalidParameter, op, "missing issuer")
|
|
}
|
|
if sub == "" {
|
|
return "", errors.New(ctx, errors.InvalidParameter, op, "missing subject")
|
|
}
|
|
id, err := db.NewPublicId(ctx, globals.OidcAccountPrefix, db.WithPrngValues([]string{authMethodId, issuer, sub}))
|
|
if err != nil {
|
|
return "", errors.Wrap(ctx, err, op)
|
|
}
|
|
return id, nil
|
|
}
|
|
|
|
func newManagedGroupId(ctx context.Context) (string, error) {
|
|
const op = "oidc.newManagedGroupId"
|
|
id, err := db.NewPublicId(ctx, globals.OidcManagedGroupPrefix)
|
|
if err != nil {
|
|
return "", errors.Wrap(ctx, err, op)
|
|
}
|
|
return id, nil
|
|
}
|