snapshot of https://github.com/cortezaproject/corteza.git (2024.9.x, 2026-09-18; blobs > 131072B omitted)

server/auth/commands/commands.go

@@ -0,0 +1,184 @@
+package commands
+
+import (
+	"context"
+	"time"
+
+	"github.com/cortezaproject/corteza/server/auth/external"
+	"github.com/cortezaproject/corteza/server/pkg/auth"
+	"github.com/cortezaproject/corteza/server/pkg/cli"
+	"github.com/cortezaproject/corteza/server/pkg/logger"
+	"github.com/cortezaproject/corteza/server/pkg/options"
+	"github.com/cortezaproject/corteza/server/store"
+	"github.com/cortezaproject/corteza/server/system/service"
+	"github.com/cortezaproject/corteza/server/system/types"
+	"github.com/spf13/cobra"
+)
+
+type (
+	serviceInitializer interface {
+		InitServices(ctx context.Context) error
+		Activate(ctx context.Context) error
+		Options() *options.Options
+	}
+)
+
+func commandPreRunInitService(app serviceInitializer) func(*cobra.Command, []string) error {
+	return func(_ *cobra.Command, _ []string) error {
+		return app.InitServices(cli.Context())
+	}
+}
+
+func commandPreRunInitActivate(app serviceInitializer) func(*cobra.Command, []string) error {
+	return func(_ *cobra.Command, _ []string) error {
+		return app.Activate(cli.Context())
+	}
+}
+
+func Command(ctx context.Context, app serviceInitializer, storeInit func(ctx context.Context) (store.Storer, error)) *cobra.Command {
+	var (
+		enableDiscoveredProvider               bool
+		skipValidationOnAutoDiscoveredProvider bool
+
+		clientID      uint64
+		scope         []string
+		tokenDuration time.Duration
+	)
+
+	cmd := &cobra.Command{
+		Use:   "auth",
+		Short: "Authentication management",
+	}
+
+	autoDiscoverCmd := &cobra.Command{
+		Use:     "auto-discovery [name] [url]",
+		Short:   "Auto discovers new OIDC client",
+		Args:    cobra.ExactArgs(2),
+		PreRunE: commandPreRunInitService(app),
+		Run: func(cmd *cobra.Command, args []string) {
+			ctx := cli.Context()
+
+			s, err := storeInit(ctx)
+			cli.HandleError(err)
+
+			_, err = external.RegisterOidcProvider(
+				ctx,
+				logger.Default(),
+				s,
+				app.Options().Auth,
+				args[0],
+				args[1],
+				true,
+				!skipValidationOnAutoDiscoveredProvider,
+				enableDiscoveredProvider,
+			)
+
+			cli.HandleError(err)
+
+			if enableDiscoveredProvider {
+				cmd.Println("OIDC provider successfully added and enabled.")
+			} else {
+				cmd.Println("OIDC provider successfully added (still disabled).")
+			}
+		},
+	}
+
+	autoDiscoverCmd.Flags().BoolVar(
+		&enableDiscoveredProvider,
+		"enable",
+		false,
+		"Enable this provider and external auth")
+
+	autoDiscoverCmd.Flags().BoolVar(
+		&skipValidationOnAutoDiscoveredProvider,
+		"skip-validation",
+		false,
+		"Skip validation")
+
+	jwtCmd := &cobra.Command{
+		Use:     "jwt [email-or-id]",
+		Short:   "Generates new JWT for a user",
+		Args:    cobra.MinimumNArgs(1),
+		PreRunE: commandPreRunInitService(app),
+		Run: func(cmd *cobra.Command, args []string) {
+			ctx = auth.SetIdentityToContext(ctx, auth.ServiceUser())
+			var (
+				signedToken []byte
+				user        *types.User
+				err         error
+
+				userStr = args[0]
+			)
+
+			user, err = service.DefaultUser.FindByAny(ctx, userStr)
+			cli.HandleError(err)
+
+			err = service.DefaultAuth.LoadRoleMemberships(ctx, user)
+			cli.HandleError(err)
+
+			opts := []auth.IssueOptFn{
+				auth.WithIdentity(user),
+				auth.WithScope(scope...),
+			}
+
+			if clientID > 0 {
+				opts = append(opts, auth.WithClientID(clientID))
+			}
+
+			if tokenDuration > 0 {
+				opts = append(opts, auth.WithExpiration(tokenDuration))
+			}
+
+			signedToken, err = auth.TokenIssuer.Issue(ctx, opts...)
+
+			cli.HandleError(err)
+			cmd.Println(string(signedToken))
+		},
+	}
+
+	jwtCmd.Flags().Uint64Var(
+		&clientID,
+		"auth-client",
+		0,
+		"ID if the auth client")
+
+	jwtCmd.Flags().StringArrayVar(
+		&scope,
+		"scope",
+		[]string{"profile", "api"},
+		"Scope")
+
+	jwtCmd.Flags().DurationVar(
+		&tokenDuration,
+		"duration",
+		app.Options().Auth.AccessTokenLifetime,
+		"Token expiry duration")
+
+	testEmails := &cobra.Command{
+		Use:     "test-notifications [recipient]",
+		Short:   "Sends samples of all authentication notification to recipient",
+		Args:    cobra.ExactArgs(1),
+		PreRunE: commandPreRunInitActivate(app),
+		Run: func(cmd *cobra.Command, args []string) {
+			var (
+				err error
+				ntf = service.DefaultAuthNotification
+			)
+
+			// Update current settings to be sure that we do not have outdated values
+			cli.HandleError(service.DefaultSettings.UpdateCurrent(ctx))
+
+			err = ntf.PasswordReset(ctx, args[0], "notification-testing-token")
+			cli.HandleError(err)
+		},
+	}
+
+	cmd.AddCommand(
+		autoDiscoverCmd,
+		testEmails,
+		jwtCmd,
+		assets(app),
+	)
+
+	return cmd
+}