mirror of
https://github.com/zitadel/zitadel.git
synced 2024-12-13 11:34:26 +00:00
3eb909c4b4
* add setup steps * refactoring * omitempty * cleanup * begin org * create org * setup org * setup org * merge * fixes * fixes * fixes * add project * add oidc application * fix app creation * add resourceOwner to writemodels * resource owner * cleanup * global org, iam project and iam member in setup * logs * logs * logs * cleanup * Update internal/v2/command/project.go Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com> * check project state * add org domain commands * add org status changes and member commands * fixes * policies * login policy * fix iam project event * mapper * label policy * change to command * fix * fix * handle change event differently and lot of fixes * fixes * changedEvent handling Co-authored-by: Fabi <38692350+fgerschwiler@users.noreply.github.com>
113 lines
4.3 KiB
Go
113 lines
4.3 KiB
Go
package command
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/caos/zitadel/internal/api/http"
|
|
sd "github.com/caos/zitadel/internal/config/systemdefaults"
|
|
"github.com/caos/zitadel/internal/crypto"
|
|
"github.com/caos/zitadel/internal/eventstore/v2"
|
|
"github.com/caos/zitadel/internal/id"
|
|
global_model "github.com/caos/zitadel/internal/model"
|
|
"github.com/caos/zitadel/internal/telemetry/tracing"
|
|
iam_repo "github.com/caos/zitadel/internal/v2/repository/iam"
|
|
"github.com/caos/zitadel/internal/v2/repository/org"
|
|
usr_repo "github.com/caos/zitadel/internal/v2/repository/user"
|
|
webauthn_helper "github.com/caos/zitadel/internal/webauthn"
|
|
)
|
|
|
|
type CommandSide struct {
|
|
eventstore *eventstore.Eventstore
|
|
idGenerator id.Generator
|
|
iamDomain string
|
|
|
|
idpConfigSecretCrypto crypto.Crypto
|
|
|
|
userPasswordAlg crypto.HashAlgorithm
|
|
initializeUserCode crypto.Generator
|
|
emailVerificationCode crypto.Generator
|
|
phoneVerificationCode crypto.Generator
|
|
passwordVerificationCode crypto.Generator
|
|
machineKeyAlg crypto.EncryptionAlgorithm
|
|
machineKeySize int
|
|
applicationSecretGenerator crypto.Generator
|
|
domainVerificationAlg *crypto.AESCrypto
|
|
domainVerificationGenerator crypto.Generator
|
|
domainVerificationValidator func(domain, token, verifier string, checkType http.CheckType) error
|
|
//TODO: remove global model, or move to domain
|
|
multifactors global_model.Multifactors
|
|
webauthn *webauthn_helper.WebAuthN
|
|
}
|
|
|
|
type Config struct {
|
|
Eventstore *eventstore.Eventstore
|
|
SystemDefaults sd.SystemDefaults
|
|
}
|
|
|
|
func StartCommandSide(config *Config) (repo *CommandSide, err error) {
|
|
repo = &CommandSide{
|
|
eventstore: config.Eventstore,
|
|
idGenerator: id.SonyFlakeGenerator,
|
|
iamDomain: config.SystemDefaults.Domain,
|
|
}
|
|
iam_repo.RegisterEventMappers(repo.eventstore)
|
|
org.RegisterEventMappers(repo.eventstore)
|
|
usr_repo.RegisterEventMappers(repo.eventstore)
|
|
|
|
//TODO: simplify!!!!
|
|
repo.idpConfigSecretCrypto, err = crypto.NewAESCrypto(config.SystemDefaults.IDPConfigVerificationKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
userEncryptionAlgorithm, err := crypto.NewAESCrypto(config.SystemDefaults.UserVerificationKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
repo.initializeUserCode = crypto.NewEncryptionGenerator(config.SystemDefaults.SecretGenerators.InitializeUserCode, userEncryptionAlgorithm)
|
|
repo.emailVerificationCode = crypto.NewEncryptionGenerator(config.SystemDefaults.SecretGenerators.EmailVerificationCode, userEncryptionAlgorithm)
|
|
repo.phoneVerificationCode = crypto.NewEncryptionGenerator(config.SystemDefaults.SecretGenerators.PhoneVerificationCode, userEncryptionAlgorithm)
|
|
repo.passwordVerificationCode = crypto.NewEncryptionGenerator(config.SystemDefaults.SecretGenerators.PasswordVerificationCode, userEncryptionAlgorithm)
|
|
repo.userPasswordAlg = crypto.NewBCrypt(config.SystemDefaults.SecretGenerators.PasswordSaltCost)
|
|
repo.machineKeyAlg = userEncryptionAlgorithm
|
|
repo.machineKeySize = int(config.SystemDefaults.SecretGenerators.MachineKeySize)
|
|
|
|
aesOTPCrypto, err := crypto.NewAESCrypto(config.SystemDefaults.Multifactors.OTP.VerificationKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
repo.multifactors = global_model.Multifactors{
|
|
OTP: global_model.OTP{
|
|
CryptoMFA: aesOTPCrypto,
|
|
Issuer: config.SystemDefaults.Multifactors.OTP.Issuer,
|
|
},
|
|
}
|
|
passwordAlg := crypto.NewBCrypt(config.SystemDefaults.SecretGenerators.PasswordSaltCost)
|
|
repo.applicationSecretGenerator = crypto.NewHashGenerator(config.SystemDefaults.SecretGenerators.ClientSecretGenerator, passwordAlg)
|
|
|
|
repo.domainVerificationAlg, err = crypto.NewAESCrypto(config.SystemDefaults.DomainVerification.VerificationKey)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
repo.domainVerificationGenerator = crypto.NewEncryptionGenerator(config.SystemDefaults.DomainVerification.VerificationGenerator, repo.domainVerificationAlg)
|
|
repo.domainVerificationValidator = http.ValidateDomain
|
|
web, err := webauthn_helper.StartServer(config.SystemDefaults.WebAuthN)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
repo.webauthn = web
|
|
return repo, nil
|
|
}
|
|
|
|
func (r *CommandSide) getIAMWriteModel(ctx context.Context) (_ *IAMWriteModel, err error) {
|
|
ctx, span := tracing.NewSpan(ctx)
|
|
defer func() { span.EndWithError(err) }()
|
|
|
|
writeModel := NewIAMWriteModel()
|
|
err = r.eventstore.FilterToQueryReducer(ctx, writeModel)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return writeModel, nil
|
|
}
|