krill 0.16.0

Resource Public Key Infrastructure (RPKI) daemon
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

use std::collections::HashMap;
use serde::Deserialize;
use super::claims::{MatchRule, TransformationRule};

#[derive(Clone, Debug, Deserialize)]
pub struct ConfigAuthOpenIDConnect {
    pub issuer_url: String,

    pub client_id: String,

    pub client_secret: String,

    #[serde(default = "default_id_claims")]
    pub id_claims: Vec<TransformationRule>,

    #[serde(default = "default_role_claims")]
    pub role_claims: Vec<TransformationRule>,

    #[serde(default)]
    pub extra_login_scopes: Vec<String>,

    #[serde(default)]
    pub extra_login_params: HashMap<String, String>,

    #[serde(default = "default_prompt_for_login")]
    pub prompt_for_login: bool,

    #[serde(default)]
    pub logout_url: Option<String>,

    #[serde(default)]
    pub insecure: bool,
}

fn default_prompt_for_login() -> bool {
    // On by default for backward compatability.
    // See: https://github.com/NLnetLabs/krill/issues/614
    true
}

fn default_id_claims() -> Vec<TransformationRule> {
    vec![
        TransformationRule::Match(MatchRule {
            source: None,
            claim: "email".into(),
            match_expr: None,
            subst: None,
        }),
    ]
}

fn default_role_claims() -> Vec<TransformationRule> {
    vec![
        TransformationRule::Match(MatchRule {
            source: None,
            claim: "role".into(),
            match_expr: None,
            subst: None,
        }),
    ]
}