feat: port reduction (#323)

* move mgmt pkg * begin package restructure * rename auth package to authz * begin start api * move auth * move admin * fix merge * configs and interceptors * interceptor * revert generate-grpc.sh * some cleanups * console * move console * fix tests and merging * js linting * merge * merging and configs * change k8s base to current ports * fixes * cleanup * regenerate proto * remove unnecessary whitespace * missing param * go mod tidy * fix merging * move login pkg * cleanup * move api pkgs again * fix pkg naming * fix generate-static.sh for login * update workflow * fixes * logging * remove duplicate * comment for optional gateway interfaces * regenerate protos * fix proto imports for grpc web * protos * grpc web generate * grpc web generate * fix changes * add translation interceptor * fix merging * regenerate mgmt proto
2025-10-25 20:38:48 +00:00 · 2020-07-08 13:56:37 +02:00
parent 708652a655
commit 3549a8b64e
330 changed files with 30495 additions and 30809 deletions
--- a/internal/ui/console/console.go
+++ b/internal/ui/console/console.go
@@ -0,0 +1,103 @@
+package console
+
+import (
+	"net/http"
+	"os"
+	"path"
+	"strings"
+	"time"
+
+	"github.com/rakyll/statik/fs"
+
+	"github.com/caos/zitadel/internal/api/http/middleware"
+	_ "github.com/caos/zitadel/internal/ui/console/statik"
+)
+
+type Config struct {
+	Port            string
+	EnvOverwriteDir string
+	ShortCache      middleware.CacheConfig
+	LongCache       middleware.CacheConfig
+	CSPDomain       string
+}
+
+type spaHandler struct {
+	fileSystem http.FileSystem
+}
+
+const (
+	envRequestPath = "/assets/environment.json"
+	envDefaultDir  = "/console/"
+)
+
+var (
+	paths = []string{
+		"/index.html",
+		"/manifest.webmanifest",
+		"/ngsw.json",
+		"/ngsw-worker.js",
+		"/safety-worker.js",
+		"/worker-basic.min.js",
+	}
+)
+
+func (i *spaHandler) Open(name string) (http.File, error) {
+	ret, err := i.fileSystem.Open(name)
+	if !os.IsNotExist(err) || path.Ext(name) != "" {
+		return ret, err
+	}
+
+	return i.fileSystem.Open("/index.html")
+}
+
+func Start(config Config) (http.Handler, error) {
+	statikFS, err := fs.NewWithNamespace("console")
+	if err != nil {
+		return nil, err
+	}
+	envDir := envDefaultDir
+	if config.EnvOverwriteDir != "" {
+		envDir = config.EnvOverwriteDir
+	}
+	cache := AssetsCacheInterceptorIgnoreManifest(
+		config.ShortCache.MaxAge.Duration,
+		config.ShortCache.SharedMaxAge.Duration,
+		config.LongCache.MaxAge.Duration,
+		config.LongCache.SharedMaxAge.Duration,
+	)
+	security := middleware.SecurityHeaders(csp(config.CSPDomain), nil)
+	handler := &http.ServeMux{}
+	handler.Handle("/", cache(security(http.FileServer(&spaHandler{statikFS}))))
+	handler.Handle(envRequestPath, cache(security(http.StripPrefix("/assets", http.FileServer(http.Dir(envDir))))))
+	return handler, nil
+}
+
+func csp(zitadelDomain string) *middleware.CSP {
+	if !strings.HasPrefix(zitadelDomain, "*.") {
+		zitadelDomain = "*." + zitadelDomain
+	}
+	csp := middleware.DefaultSCP
+	csp.StyleSrc = csp.StyleSrc.AddInline().AddHost("fonts.googleapis.com").AddHost("maxst.icons8.com") //TODO: host it
+	csp.FontSrc = csp.FontSrc.AddHost("fonts.gstatic.com").AddHost("maxst.icons8.com")                  //TODO: host it
+	csp.ScriptSrc = csp.ScriptSrc.AddEval()
+	csp.ConnectSrc = csp.ConnectSrc.AddHost(zitadelDomain).
+		AddHost("fonts.googleapis.com").
+		AddHost("fonts.gstatic.com").
+		AddHost("maxst.icons8.com") //TODO: host it
+	return &csp
+}
+
+func AssetsCacheInterceptorIgnoreManifest(shortMaxAge, shortSharedMaxAge, longMaxAge, longSharedMaxAge time.Duration) func(http.Handler) http.Handler {
+	return func(handler http.Handler) http.Handler {
+		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			for _, path := range paths {
+				if r.URL.Path == path {
+					middleware.AssetsCacheInterceptor(shortMaxAge, shortSharedMaxAge, handler).ServeHTTP(w, r)
+					return
+				}
+				middleware.AssetsCacheInterceptor(longMaxAge, longSharedMaxAge, handler).ServeHTTP(w, r)
+				return
+			}
+		})
+	}
+}