feat: persist encrypted env

2021-12-31 13:52:10 +05:30
parent d9c40057e6
commit e35d0cbcd6
41 changed files with 751 additions and 298 deletions
--- a/server/constants/constants.go
+++ b/server/constants/constants.go
@@ -1,50 +1,61 @@
 package constants

-// this constants are configured via env
-var (
-	ADMIN_SECRET                 = ""
-	ENV                          = ""
-	ENV_PATH                     = ""
-	VERSION                      = ""
-	DATABASE_TYPE                = ""
-	DATABASE_URL                 = ""
-	DATABASE_NAME                = ""
-	SMTP_HOST                    = ""
-	SMTP_PORT                    = ""
-	SENDER_EMAIL                 = ""
-	SENDER_PASSWORD              = ""
-	JWT_TYPE                     = ""
-	JWT_SECRET                   = ""
-	ALLOWED_ORIGINS              = []string{}
-	AUTHORIZER_URL               = ""
-	APP_URL                      = ""
-	PORT                         = ""
-	REDIS_URL                    = ""
-	IS_PROD                      = false
-	COOKIE_NAME                  = ""
-	RESET_PASSWORD_URL           = ""
-	DISABLE_EMAIL_VERIFICATION   = false
-	DISABLE_BASIC_AUTHENTICATION = false
-	DISABLE_MAGIC_LINK_LOGIN     = false
-	DISABLE_LOGIN_PAGE           = false
+type EnvConst struct {
+	ADMIN_SECRET                 string
+	ENV                          string
+	ENV_PATH                     string
+	VERSION                      string
+	DATABASE_TYPE                string
+	DATABASE_URL                 string
+	DATABASE_NAME                string
+	SMTP_HOST                    string
+	SMTP_PORT                    string
+	SENDER_EMAIL                 string
+	SENDER_PASSWORD              string
+	JWT_TYPE                     string
+	JWT_SECRET                   string
+	ALLOWED_ORIGINS              []string
+	AUTHORIZER_URL               string
+	APP_URL                      string
+	PORT                         string
+	REDIS_URL                    string
+	COOKIE_NAME                  string
+	ADMIN_COOKIE_NAME            string
+	RESET_PASSWORD_URL           string
+	ENCRYPTION_KEY               string `json:"-"`
+	IS_PROD                      bool
+	DISABLE_EMAIL_VERIFICATION   bool
+	DISABLE_BASIC_AUTHENTICATION bool
+	DISABLE_MAGIC_LINK_LOGIN     bool
+	DISABLE_LOGIN_PAGE           bool

 	// ROLES
-	ROLES           = []string{}
-	PROTECTED_ROLES = []string{}
-	DEFAULT_ROLES   = []string{}
-	JWT_ROLE_CLAIM  = "role"
+	ROLES           []string
+	PROTECTED_ROLES []string
+	DEFAULT_ROLES   []string
+	JWT_ROLE_CLAIM  string

 	// OAuth login
-	GOOGLE_CLIENT_ID       = ""
-	GOOGLE_CLIENT_SECRET   = ""
-	GITHUB_CLIENT_ID       = ""
-	GITHUB_CLIENT_SECRET   = ""
-	FACEBOOK_CLIENT_ID     = ""
-	FACEBOOK_CLIENT_SECRET = ""
-	TWITTER_CLIENT_ID      = ""
-	TWITTER_CLIENT_SECRET  = ""
+	GOOGLE_CLIENT_ID       string
+	GOOGLE_CLIENT_SECRET   string
+	GITHUB_CLIENT_ID       string
+	GITHUB_CLIENT_SECRET   string
+	FACEBOOK_CLIENT_ID     string
+	FACEBOOK_CLIENT_SECRET string

 	// Org envs
-	ORGANIZATION_NAME = "Authorizer"
-	ORGANIZATION_LOGO = "https://authorizer.dev/images/logo.png"
-)
+	ORGANIZATION_NAME string
+	ORGANIZATION_LOGO string
+}
+
+var EnvData = EnvConst{
+	ADMIN_COOKIE_NAME:            "authorizer-admin",
+	JWT_ROLE_CLAIM:               "role",
+	ORGANIZATION_NAME:            "Authorizer",
+	ORGANIZATION_LOGO:            "https://authorizer.dev/images/logo.png",
+	DISABLE_EMAIL_VERIFICATION:   false,
+	DISABLE_BASIC_AUTHENTICATION: false,
+	DISABLE_MAGIC_LINK_LOGIN:     false,
+	DISABLE_LOGIN_PAGE:           false,
+	IS_PROD:                      false,
+}