mirror of
https://github.com/portainer/portainer.git
synced 2025-07-22 14:59:41 +02:00
bca1c6b9cf
* feat(internal-auth): ability to set minimum password length [EE-3175] * pass props to react component * fixes + WIP slider * fix slider updating + add styles * remove nested ternary * fix slider updating + add remind me later button * add length to settings + value & onchange method * finish my account view * fix slider updating * slider styles * update style * move slider in * update size of slider * allow admin to browse to authentication view * use feather icons instead of font awesome * feat(settings): add colors to password rules * clean up tooltip styles * more style changes * styles * fixes + use requiredLength in password field for icon logic * simplify logic * simplify slider logic and remove debug code * use required length for logic to display pwd length warning * fix slider styles * use requiredPasswordLength to determine if password is valid * style tooltip based on theme * reset skips when password is changed * misc cleanup * reset skips when required length is changed * fix formatting * fix issues * implement some suggestions * simplify logic * update broken test * pick min password length from DB * fix suggestions * set up min password length in the DB * fix test after migration * fix formatting issue * fix bug with icon * refactored migration * fix typo * fixes * fix logic * set skips per user * reset skips for all users on length change Co-authored-by: Chaim Lev-Ari <chiptus@gmail.com> Co-authored-by: Dmitry Salakhov <to@dimasalakhov.com>
76 lines
3.5 KiB
Go
76 lines
3.5 KiB
Go
package settings
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
|
|
httperror "github.com/portainer/libhttp/error"
|
|
"github.com/portainer/libhttp/response"
|
|
portainer "github.com/portainer/portainer/api"
|
|
)
|
|
|
|
type publicSettingsResponse struct {
|
|
// URL to a logo that will be displayed on the login page as well as on top of the sidebar. Will use default Portainer logo when value is empty string
|
|
LogoURL string `json:"LogoURL" example:"https://mycompany.mydomain.tld/logo.png"`
|
|
// Active authentication method for the Portainer instance. Valid values are: 1 for internal, 2 for LDAP, or 3 for oauth
|
|
AuthenticationMethod portainer.AuthenticationMethod `json:"AuthenticationMethod" example:"1"`
|
|
// The minimum required length for a password of any user when using internal auth mode
|
|
RequiredPasswordLength int `json:"RequiredPasswordLength" example:"1"`
|
|
// Whether edge compute features are enabled
|
|
EnableEdgeComputeFeatures bool `json:"EnableEdgeComputeFeatures" example:"true"`
|
|
// Supported feature flags
|
|
Features map[portainer.Feature]bool `json:"Features"`
|
|
// The URL used for oauth login
|
|
OAuthLoginURI string `json:"OAuthLoginURI" example:"https://gitlab.com/oauth"`
|
|
// The URL used for oauth logout
|
|
OAuthLogoutURI string `json:"OAuthLogoutURI" example:"https://gitlab.com/oauth/logout"`
|
|
// Whether telemetry is enabled
|
|
EnableTelemetry bool `json:"EnableTelemetry" example:"true"`
|
|
// The expiry of a Kubeconfig
|
|
KubeconfigExpiry string `example:"24h" default:"0"`
|
|
}
|
|
|
|
// @id SettingsPublic
|
|
// @summary Retrieve Portainer public settings
|
|
// @description Retrieve public settings. Returns a small set of settings that are not reserved to administrators only.
|
|
// @description **Access policy**: public
|
|
// @tags settings
|
|
// @produce json
|
|
// @success 200 {object} publicSettingsResponse "Success"
|
|
// @failure 500 "Server error"
|
|
// @router /settings/public [get]
|
|
func (handler *Handler) settingsPublic(w http.ResponseWriter, r *http.Request) *httperror.HandlerError {
|
|
settings, err := handler.DataStore.Settings().Settings()
|
|
if err != nil {
|
|
return &httperror.HandlerError{StatusCode: http.StatusInternalServerError, Message: "Unable to retrieve the settings from the database", Err: err}
|
|
}
|
|
|
|
publicSettings := generatePublicSettings(settings)
|
|
return response.JSON(w, publicSettings)
|
|
}
|
|
|
|
func generatePublicSettings(appSettings *portainer.Settings) *publicSettingsResponse {
|
|
publicSettings := &publicSettingsResponse{
|
|
LogoURL: appSettings.LogoURL,
|
|
AuthenticationMethod: appSettings.AuthenticationMethod,
|
|
RequiredPasswordLength: appSettings.InternalAuthSettings.RequiredPasswordLength,
|
|
EnableEdgeComputeFeatures: appSettings.EnableEdgeComputeFeatures,
|
|
EnableTelemetry: appSettings.EnableTelemetry,
|
|
KubeconfigExpiry: appSettings.KubeconfigExpiry,
|
|
Features: appSettings.FeatureFlagSettings,
|
|
}
|
|
//if OAuth authentication is on, compose the related fields from application settings
|
|
if publicSettings.AuthenticationMethod == portainer.AuthenticationOAuth {
|
|
publicSettings.OAuthLogoutURI = appSettings.OAuthSettings.LogoutURI
|
|
publicSettings.OAuthLoginURI = fmt.Sprintf("%s?response_type=code&client_id=%s&redirect_uri=%s&scope=%s",
|
|
appSettings.OAuthSettings.AuthorizationURI,
|
|
appSettings.OAuthSettings.ClientID,
|
|
appSettings.OAuthSettings.RedirectURI,
|
|
appSettings.OAuthSettings.Scopes)
|
|
//control prompt=login param according to the SSO setting
|
|
if !appSettings.OAuthSettings.SSO {
|
|
publicSettings.OAuthLoginURI += "&prompt=login"
|
|
}
|
|
}
|
|
return publicSettings
|
|
}
|