mirror of
https://github.com/matrix-org/dendrite
synced 2024-12-25 12:03:43 +01:00
d27607af78
* Implement OpenID module (#599) - Unrelated: change Riot references to Element in client API routing Signed-off-by: Bruce MacDonald <contact@bruce-macdonald.com> * OpenID module tweaks (#599) - specify expiry is ms rather than vague ts - add OpenID token lifetime to configuration - use Go naming conventions for the path params - store plaintext token rather than hash - remove openid table sqllite mutex * Add default OpenID token lifetime (#599) * Update dendrite-config.yaml Co-authored-by: Kegsay <kegsay@gmail.com> Co-authored-by: Kegsay <kegan@matrix.org>
43 lines
1.7 KiB
Go
43 lines
1.7 KiB
Go
package config
|
|
|
|
import "golang.org/x/crypto/bcrypt"
|
|
|
|
type UserAPI struct {
|
|
Matrix *Global `yaml:"-"`
|
|
|
|
InternalAPI InternalAPIOptions `yaml:"internal_api"`
|
|
|
|
// The cost when hashing passwords.
|
|
BCryptCost int `yaml:"bcrypt_cost"`
|
|
|
|
// The length of time an OpenID token is condidered valid in milliseconds
|
|
OpenIDTokenLifetimeMS int64 `yaml:"openid_token_lifetime_ms"`
|
|
|
|
// The Account database stores the login details and account information
|
|
// for local users. It is accessed by the UserAPI.
|
|
AccountDatabase DatabaseOptions `yaml:"account_database"`
|
|
// The Device database stores session information for the devices of logged
|
|
// in local users. It is accessed by the UserAPI.
|
|
DeviceDatabase DatabaseOptions `yaml:"device_database"`
|
|
}
|
|
|
|
const DefaultOpenIDTokenLifetimeMS = 3600000 // 60 minutes
|
|
|
|
func (c *UserAPI) Defaults() {
|
|
c.InternalAPI.Listen = "http://localhost:7781"
|
|
c.InternalAPI.Connect = "http://localhost:7781"
|
|
c.AccountDatabase.Defaults(10)
|
|
c.DeviceDatabase.Defaults(10)
|
|
c.AccountDatabase.ConnectionString = "file:userapi_accounts.db"
|
|
c.DeviceDatabase.ConnectionString = "file:userapi_devices.db"
|
|
c.BCryptCost = bcrypt.DefaultCost
|
|
c.OpenIDTokenLifetimeMS = DefaultOpenIDTokenLifetimeMS
|
|
}
|
|
|
|
func (c *UserAPI) Verify(configErrs *ConfigErrors, isMonolith bool) {
|
|
checkURL(configErrs, "user_api.internal_api.listen", string(c.InternalAPI.Listen))
|
|
checkURL(configErrs, "user_api.internal_api.connect", string(c.InternalAPI.Connect))
|
|
checkNotEmpty(configErrs, "user_api.account_database.connection_string", string(c.AccountDatabase.ConnectionString))
|
|
checkNotEmpty(configErrs, "user_api.device_database.connection_string", string(c.DeviceDatabase.ConnectionString))
|
|
checkPositive(configErrs, "user_api.openid_token_lifetime_ms", c.OpenIDTokenLifetimeMS)
|
|
}
|