SecurityConfiguration.cs

Go to the documentation of this file.

using System;
using System.Collections.Generic;
using System.Linq;
 
using Swashbuckle.AspNetCore.SwaggerGen;
 
using Tgstation.Server.Api.Models;
 
namespace Tgstation.Server.Host.Configuration
{
    public sealed class SecurityConfiguration
    {
        public const string Section = "Security";
 
        const uint DefaultTokenExpiryMinutes = 15;
 
        const uint DefaultOAuthTokenExpiryMinutes = 60 * 24; // 1 day
 
        const uint DefaultTokenClockSkewMinutes = 1;
 
        const uint DefaultTokenSigningKeyByteAmount = 256;
 
        public uint TokenExpiryMinutes { get; set; } = DefaultTokenExpiryMinutes;
 
        public uint TokenClockSkewMinutes { get; set; } = DefaultTokenClockSkewMinutes;
 
        public uint TokenSigningKeyByteCount { get; set; } = DefaultTokenSigningKeyByteAmount;
 
        public uint OAuthTokenExpiryMinutes { get; set; } = DefaultOAuthTokenExpiryMinutes;
 
        public string? CustomTokenSigningKeyBase64 { get; set; }
 
        public bool OidcStrictMode { get; set; }
 
        public IDictionary<OAuthProvider, OAuthConfiguration>? OAuth
        {
            get => oAuth;
            set
            {
                // Workaround for https://github.com/dotnet/runtime/issues/89547
                var publicProperties = typeof(OAuthConfiguration)
                    .GetProperties()
                    .Where(property => property.CanWrite && property.SetMethod!.IsPublic)
                    .ToList();
                oAuth = value
                    ?.Where(
                        kvp => !publicProperties.All(
                            prop => prop.GetValue(kvp.Value) == prop.PropertyType.GetDefaultValue()))
                    .ToDictionary(kvp => kvp.Key, kvp => kvp.Value);
            }
        }
 
        IDictionary<OAuthProvider, OAuthConfiguration>? oAuth;
 
        public IDictionary<string, OidcConfiguration>? OpenIDConnect { get; set; }
 
        public IEnumerable<OidcProviderInfo> OidcProviderInfos()
            => OpenIDConnect?.Select(oidcConfig => new OidcProviderInfo
            {
                SchemeKey = oidcConfig.Key,
                FriendlyName = oidcConfig.Value.FriendlyName ?? oidcConfig.Key,
                ThemeColour = oidcConfig.Value.ThemeColour,
                ThemeIconUrl = oidcConfig.Value.ThemeIconUrl,
            }) ?? Enumerable.Empty<OidcProviderInfo>();
    }
}