10beed1199
- no longer set prompt to 'login' (makes auto-login possible) - new prompt configuration - allow arbitrary username-claim values Depend on proxmox-openid 0.9.0. Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>
69 lines
2.2 KiB
Rust
69 lines
2.2 KiB
Rust
use std::collections::HashMap;
|
|
|
|
use anyhow::{Error};
|
|
use lazy_static::lazy_static;
|
|
|
|
use proxmox_schema::{ApiType, Schema};
|
|
use proxmox_section_config::{SectionConfig, SectionConfigData, SectionConfigPlugin};
|
|
|
|
use pbs_api_types::{OpenIdRealmConfig, REALM_ID_SCHEMA};
|
|
use crate::{open_backup_lockfile, replace_backup_config, BackupLockGuard};
|
|
|
|
lazy_static! {
|
|
pub static ref CONFIG: SectionConfig = init();
|
|
}
|
|
|
|
|
|
fn init() -> SectionConfig {
|
|
let obj_schema = match OpenIdRealmConfig::API_SCHEMA {
|
|
Schema::Object(ref obj_schema) => obj_schema,
|
|
_ => unreachable!(),
|
|
};
|
|
|
|
let plugin = SectionConfigPlugin::new("openid".to_string(), Some(String::from("realm")), obj_schema);
|
|
let mut config = SectionConfig::new(&REALM_ID_SCHEMA);
|
|
config.register_plugin(plugin);
|
|
|
|
config
|
|
}
|
|
|
|
pub const DOMAINS_CFG_FILENAME: &str = "/etc/proxmox-backup/domains.cfg";
|
|
pub const DOMAINS_CFG_LOCKFILE: &str = "/etc/proxmox-backup/.domains.lck";
|
|
|
|
/// Get exclusive lock
|
|
pub fn lock_config() -> Result<BackupLockGuard, Error> {
|
|
open_backup_lockfile(DOMAINS_CFG_LOCKFILE, None, true)
|
|
}
|
|
|
|
pub fn config() -> Result<(SectionConfigData, [u8;32]), Error> {
|
|
|
|
let content = proxmox::tools::fs::file_read_optional_string(DOMAINS_CFG_FILENAME)?
|
|
.unwrap_or_else(|| "".to_string());
|
|
|
|
let digest = openssl::sha::sha256(content.as_bytes());
|
|
let data = CONFIG.parse(DOMAINS_CFG_FILENAME, &content)?;
|
|
Ok((data, digest))
|
|
}
|
|
|
|
pub fn save_config(config: &SectionConfigData) -> Result<(), Error> {
|
|
let raw = CONFIG.write(DOMAINS_CFG_FILENAME, &config)?;
|
|
replace_backup_config(DOMAINS_CFG_FILENAME, raw.as_bytes())
|
|
}
|
|
|
|
// shell completion helper
|
|
pub fn complete_realm_name(_arg: &str, _param: &HashMap<String, String>) -> Vec<String> {
|
|
match config() {
|
|
Ok((data, _digest)) => data.sections.iter().map(|(id, _)| id.to_string()).collect(),
|
|
Err(_) => return vec![],
|
|
}
|
|
}
|
|
|
|
pub fn complete_openid_realm_name(_arg: &str, _param: &HashMap<String, String>) -> Vec<String> {
|
|
match config() {
|
|
Ok((data, _digest)) => data.sections.iter()
|
|
.filter_map(|(id, (t, _))| if t == "openid" { Some(id.to_string()) } else { None })
|
|
.collect(),
|
|
Err(_) => return vec![],
|
|
}
|
|
}
|