Repository navigation
Expand file tree
/
Copy pathauth-providers.go
More file actions
78 lines (66 loc) · 1.54 KB
/
Copy pathauth-providers.go
File metadata and controls
78 lines (66 loc) · 1.54 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
package cmd
import (
"fmt"
"sync"
)
type authProviders struct {
sync.RWMutex
SAML samlProviders `json:"saml"`
// Add new auth providers.
}
const minioIAM = "arn:minio:iam:"
func (a *authProviders) GetAllAuthProviders() map[string]struct{} {
a.RLock()
defer a.RUnlock()
authProviderArns := make(map[string]struct{})
for k, v := range a.SAML {
if v.Enable {
// Construct the auth ARN.
authARN := minioIAM + serverConfig.GetRegion() + ":" + k + ":saml"
authProviderArns[authARN] = struct{}{}
}
}
return authProviderArns
}
func (a *authProviders) GetSAML() samlProviders {
a.RLock()
defer a.RUnlock()
return a.SAML.Clone()
}
func (a *authProviders) GetSAMLByID(accountID string) samlProvider {
a.RLock()
defer a.RUnlock()
return a.SAML[accountID]
}
func (a *authProviders) SetSAMLByID(accountID string, s samlProvider) {
a.Lock()
defer a.Unlock()
a.SAML[accountID] = s
}
type samlProviders map[string]samlProvider
func (a samlProviders) Clone() samlProviders {
a2 := make(samlProviders, len(a))
for k, v := range a {
a2[k] = v
}
return a2
}
func (a samlProviders) Validate() error {
for k, v := range a {
if err := v.Validate(); err != nil {
return fmt.Errorf("SAML [%s] configuration invalid: %s", k, err)
}
}
return nil
}
type samlProvider struct {
Enable bool `json:"enable"`
IDP string `json:"idP"`
ProviderID string `json:"providerId"`
}
func (s samlProvider) Validate() error {
if s.IDP != "" && s.ProviderID != "" {
return nil
}
return fmt.Errorf("Invalid saml provider configuration %#v", s)
}