modules/api/module.go - master - archaron/go-yubiserv

modules/api/module.go
77 строк2 KB
Alexander Tischenko
chore: refactoring / tests
04 мар 2026, 20:12
04 мар 2026, 20:12519fe11
package api

import (
	"errors"
	"fmt"

	"github.com/im-kulikov/helium/module"
	"github.com/im-kulikov/helium/service"
	"github.com/spf13/viper"
	"github.com/urfave/cli/v2"
	"go.uber.org/dig"

	"github.com/archaron/go-yubiserv/common"
)

// Module api constructor.
var Module = module.Module{ //nolint:gochecknoglobals
	{Constructor: newAPIService, Options: []dig.ProvideOption{dig.Group("services")}},
}

var (
	ErrTLSParams       = errors.New("both tls certificate file and private key file must be set to enable TLS")
	ErrNoStorageModule = errors.New("no storage module selected")
)

func newAPIService(p serviceParams) (service.Service, error) {
	if p.Storage == nil {
		return nil, ErrNoStorageModule
	}

	// Check if the API secret key is specified.
	apiKey, err := makeAPIKey(p.Config.GetString("api.secret"))
	if err != nil {
		return nil, fmt.Errorf("cannot get api key: %w", err)
	}

	svc := &Service{
		log:      p.Logger,
		address:  p.Config.GetString("api.address"),
		settings: p.Settings,
		apiKey:   apiKey,
		timeout:  p.Config.GetDuration("api.timeout"),
		storage:  p.Storage,
		cert:     p.Config.GetString("api.tls_cert"),
		key:      p.Config.GetString("api.tls_key"),
		Users:    make(common.OTPUsers),
		started:  make(chan struct{}),
	}

	svc.log.Debug("API created")

	return svc, nil
}

// Defaults for storage service.
func Defaults(ctx *cli.Context, v *viper.Viper) error {
	// api:
	v.SetDefault("api.address", ctx.String("api-address"))
	v.SetDefault("api.timeout", ctx.String("api-timeout"))
	v.SetDefault("api.secret", ctx.String("api-secret"))

	tlsCert := ctx.String("api-tls-cert")
	tlsKey := ctx.String("api-tls-key")

	// If TLS enabled (specified cert or key)
	if tlsCert != "" || tlsKey != "" {
		// Check if both fields filled
		if tlsCert == "" || tlsKey == "" {
			return ErrTLSParams
		}
	}

	v.SetDefault("api.tls_cert", tlsCert)
	v.SetDefault("api.tls_key", tlsKey)

	return nil
}