feat: Add config struct of OpenID-Connect Login

api/conf/conf.yaml

@@ -80,6 +80,17 @@ authentication:
     - username: user
       password: user
 
+oidc:
+  secret:
+    secret
+  expire_time: 3600
+  apps:
+    - app_name: authing
+      client_id:
+      client_secret:
+      scope: oidc
+      redirect_uri: /authing/callback
+
 plugins:                          # plugin list (sorted in alphabetical order)
   - api-breaker
   - authz-keycloak

api/internal/conf/conf.go

@@ -58,6 +58,8 @@ var (
 	AccessLogPath    = "logs/access.log"
 	UserList         = make(map[string]User, 2)
 	AuthConf         Authentication
+	AppList          = make(map[string]App, 1)
+	OidcConf         Oidc
 	SSLDefaultStatus = 1 //enable ssl by default
 	ImportSizeLimit  = 10 * 1024 * 1024
 	AllowList        []string
@@ -126,10 +128,25 @@ type Authentication struct {
 	Users      []User
 }
 
+type App struct {
+	AppName      string `mapstructure:"app_name"`
+	ClientId     string `mapstructure:"client_id"`
+	ClientSecret string `mapstructure:"client_secret"`
+	Scope        string
+	RedirectUri  string `mapstructure:"redirect_uri"`
+}
+
+type Oidc struct {
+	Secret     string
+	ExpireTime int `mapstructure:"expire_time" yaml:"expire_time"`
+	Apps       []App
+}
+
 type Config struct {
 	Conf           Conf
 	Authentication Authentication
 	Plugins        []string
+	Oidc           Oidc
 }
 
 type Security struct {
@@ -256,6 +273,9 @@ func setupConfig() {
 	// set authentication
 	initAuthentication(config.Authentication)
 
+	//set Oidc
+	initOidc(config.Oidc)
+
 	// set plugin
 	initPlugins(config.Plugins)
 
@@ -283,6 +303,19 @@ func initAuthentication(conf Authentication) {
 	}
 }
 
+func initOidc(conf Oidc) {
+	OidcConf = conf
+
+	if OidcConf.Secret == "secret" {
+		OidcConf.Secret = utils.GetFlakeUidStr()
+	}
+	appList := OidcConf.Apps
+
+	for _, item := range appList {
+		AppList[item.AppName] = item
+	}
+}
+
 func initPlugins(plugins []string) {
 	for _, pluginName := range plugins {
 		Plugins[pluginName] = true

api/internal/filter/invalid_request.go

@@ -34,8 +34,5 @@ func InvalidRequest() gin.HandlerFunc {
 }
 
 func checkURL(url *url.URL) bool {
-	if strings.Contains(url.Path, "..") {
-		return false
-	}
-	return true
+	return !strings.Contains(url.Path, "..")
 }

api/internal/handler/data_loader/loader/openapi3/import.go

@@ -75,8 +75,7 @@ func (o Loader) convertToEntities(s *openapi3.Swagger) (*loader.DataSets, error)
 
 	// create upstream when servers field not empty
 	if len(s.Servers) > 0 {
-		var upstream entity.Upstream
-		upstream = entity.Upstream{
+		upstream := entity.Upstream{
 			BaseInfo: entity.BaseInfo{ID: globalUpstreamID},
 			UpstreamDef: entity.UpstreamDef{
 				Name: globalUpstreamID,

api/internal/handler/data_loader/route_import.go

@@ -113,7 +113,6 @@ func (h *ImportHandler) Import(c droplet.Context) (interface{}, error) {
 			MergeMethod: input.MergeMethod == "true",
 			TaskName:    input.TaskName,
 		}
-		break
 	default:
 		return nil, fmt.Errorf("unsupported data loader type: %s", input.Type)
 	}