mirror of
https://github.com/storytold/irsa-manager.git
synced 2026-10-09 00:09:43 +00:00
kkb0318
67 lines
2.0 KiB
Go
67 lines
2.0 KiB
Go
package oidc
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
"github.com/kkb0318/irsa-manager/internal/client"
|
|
"github.com/kkb0318/irsa-manager/internal/selfhosted"
|
|
)
|
|
|
|
const CONFIGURATION_PATH = ".well-known/openid-configuration"
|
|
|
|
type S3IdPCreator struct {
|
|
s3Client *client.AwsS3Client
|
|
}
|
|
|
|
// NewS3IdPCreator initializes a new instance of S3IdPCreator with the specified AWS region and bucket name.
|
|
// This function attempts to create an AWS client configured for the specified region.
|
|
func NewS3IdPCreator(region, bucketName string) (*S3IdPCreator, error) {
|
|
ctx := context.Background()
|
|
awsConfig, err := client.NewAwsClient(ctx, region)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("unable to load SDK config, %w", err)
|
|
}
|
|
s3Client := awsConfig.S3Cient(bucketName)
|
|
return &S3IdPCreator{s3Client}, nil
|
|
}
|
|
|
|
|
|
// CreateStorage creates an S3 bucket
|
|
func (s *S3IdPCreator) CreateStorage() error {
|
|
err := s.s3Client.CreateBucket(context.TODO())
|
|
if err != nil {
|
|
return fmt.Errorf("unable to create bucket, %w", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// Upload uploads the OIDC provider's discovery configuration and JSON Web Key Set (JWKS) to the specified AWS S3 bucket.
|
|
// This method is responsible for uploading the necessary OIDC configuration files to S3, making them accessible for OIDC clients.
|
|
func (s *S3IdPCreator) Upload(ctx context.Context, o selfhosted.OIDCIdProvider) error {
|
|
err := s.s3Client.PutObject(ctx,
|
|
CONFIGURATION_PATH,
|
|
o.Discovery(),
|
|
)
|
|
if err != nil {
|
|
return fmt.Errorf("unable to upload discovery document, %w", err)
|
|
}
|
|
|
|
// Uplaod JWK
|
|
err = s.s3Client.PutObject(ctx,
|
|
"keys.json",
|
|
o.JWK(),
|
|
)
|
|
if err != nil {
|
|
return fmt.Errorf("unable to upload JWK, %w", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// issuerHostPath constructs the URL path for the OIDC issuer based on the provided AWS region and bucket name.
|
|
// This utility function generates the expected host path for accessing the OIDC configuration stored in an S3 bucket.
|
|
func issuerHostPath(region, bucketName string) string {
|
|
hostName := fmt.Sprintf("s3-%s.amazonaws.com", region)
|
|
return fmt.Sprintf("%s/%s", hostName, bucketName)
|
|
}
|