c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
121 lines
3.0 KiB
Go
121 lines
3.0 KiB
Go
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package password
|
|
|
|
import (
|
|
"context"
|
|
"encoding/json"
|
|
"strings"
|
|
|
|
"github.com/ory/kratos/x/nosurfx"
|
|
|
|
"github.com/pkg/errors"
|
|
|
|
"github.com/ory/kratos/ui/node"
|
|
"github.com/ory/x/httpx"
|
|
"github.com/ory/x/jsonnetsecure"
|
|
"github.com/ory/x/logrusx"
|
|
"github.com/ory/x/otelx"
|
|
|
|
"github.com/ory/kratos/continuity"
|
|
"github.com/ory/kratos/driver/config"
|
|
"github.com/ory/kratos/hash"
|
|
"github.com/ory/kratos/identity"
|
|
"github.com/ory/kratos/selfservice/errorx"
|
|
"github.com/ory/kratos/selfservice/flow/login"
|
|
"github.com/ory/kratos/selfservice/flow/registration"
|
|
"github.com/ory/kratos/selfservice/flow/settings"
|
|
"github.com/ory/kratos/session"
|
|
"github.com/ory/kratos/x"
|
|
)
|
|
|
|
var (
|
|
_ login.Strategy = (*Strategy)(nil)
|
|
_ registration.Strategy = (*Strategy)(nil)
|
|
_ identity.ActiveCredentialsCounter = (*Strategy)(nil)
|
|
)
|
|
|
|
type dependencies interface {
|
|
logrusx.Provider
|
|
httpx.WriterProvider
|
|
nosurfx.CSRFTokenGeneratorProvider
|
|
nosurfx.CSRFProvider
|
|
httpx.ClientProvider
|
|
otelx.Provider
|
|
jsonnetsecure.VMProvider
|
|
config.Provider
|
|
continuity.ManagementProvider
|
|
|
|
x.CookieProvider
|
|
|
|
errorx.ManagementProvider
|
|
ValidationProvider
|
|
hash.HashProvider
|
|
|
|
registration.HandlerProvider
|
|
registration.HooksProvider
|
|
registration.ErrorHandlerProvider
|
|
registration.HookExecutorProvider
|
|
registration.FlowPersistenceProvider
|
|
|
|
login.HooksProvider
|
|
login.ErrorHandlerProvider
|
|
login.HookExecutorProvider
|
|
login.FlowPersistenceProvider
|
|
login.HandlerProvider
|
|
|
|
settings.FlowPersistenceProvider
|
|
settings.HookExecutorProvider
|
|
settings.HooksProvider
|
|
settings.ErrorHandlerProvider
|
|
|
|
identity.PrivilegedPoolProvider
|
|
identity.ValidationProvider
|
|
identity.ManagementProvider
|
|
|
|
session.HandlerProvider
|
|
session.ManagementProvider
|
|
}
|
|
|
|
type Strategy struct{ d dependencies }
|
|
|
|
func NewStrategy(d dependencies) *Strategy { return &Strategy{d: d} }
|
|
|
|
func (s *Strategy) CountActiveFirstFactorCredentials(ctx context.Context, cc map[identity.CredentialsType]identity.Credentials) (count int, err error) {
|
|
for _, c := range cc {
|
|
if c.Type == s.ID() && len(c.Config) > 0 {
|
|
var conf identity.CredentialsPassword
|
|
if err = json.Unmarshal(c.Config, &conf); err != nil {
|
|
return 0, errors.WithStack(err)
|
|
}
|
|
|
|
if len(strings.Join(c.Identifiers, "")) > 0 &&
|
|
((s.d.Config().PasswordMigrationHook(ctx).Enabled && conf.UsePasswordMigrationHook) ||
|
|
len(conf.HashedPassword) > 0) {
|
|
count++
|
|
}
|
|
}
|
|
}
|
|
return
|
|
}
|
|
|
|
func (s *Strategy) CountActiveMultiFactorCredentials(_ context.Context, _ map[identity.CredentialsType]identity.Credentials) (count int, err error) {
|
|
return 0, nil
|
|
}
|
|
|
|
func (s *Strategy) ID() identity.CredentialsType {
|
|
return identity.CredentialsTypePassword
|
|
}
|
|
|
|
func (s *Strategy) CompletedAuthenticationMethod(_ context.Context) session.AuthenticationMethod {
|
|
return session.AuthenticationMethod{
|
|
Method: s.ID(),
|
|
AAL: identity.AuthenticatorAssuranceLevel1,
|
|
}
|
|
}
|
|
|
|
func (s *Strategy) NodeGroup() node.UiNodeGroup {
|
|
return node.PasswordGroup
|
|
}
|