runegate 0.4.0

Lightweight Rust-based identity proxy
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

use crate::email::EmailConfig;
use serde::{Deserialize, Serialize};

pub const RUNEGATE_MODE_ENV: &str = "RUNEGATE_MODE";
pub const RUNEGATE_AUTH_UI_MODE_ENV: &str = "RUNEGATE_AUTH_UI_MODE";
pub const RUNEGATE_DEFAULT_REDIRECT_ENV: &str = "RUNEGATE_DEFAULT_REDIRECT";

/// Operating mode. `MagicLinkOnly` (the default) must behave identically to
/// the published magic-link-only release: gateway-mode conveniences such as
/// public root/asset paths are only enabled under `Gateway`.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
pub enum RunegateMode {
    #[default]
    MagicLinkOnly,
    Gateway,
}

impl RunegateMode {
    pub fn from_env() -> Self {
        match std::env::var(RUNEGATE_MODE_ENV).as_deref() {
            Ok("gateway") => RunegateMode::Gateway,
            _ => RunegateMode::MagicLinkOnly,
        }
    }
}

#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
pub enum AuthUiMode {
    #[default]
    Static,
    Phenotyper,
    External,
}

impl AuthUiMode {
    pub fn from_env() -> Self {
        match std::env::var(RUNEGATE_AUTH_UI_MODE_ENV).as_deref() {
            Ok("phenotyper") => AuthUiMode::Phenotyper,
            Ok("external") => AuthUiMode::External,
            _ => AuthUiMode::Static,
        }
    }
}

/// Post-login redirect target: `RUNEGATE_DEFAULT_REDIRECT`, or the historical
/// `/proxy/` default that the published release hardcoded.
pub fn default_redirect() -> String {
    std::env::var(RUNEGATE_DEFAULT_REDIRECT_ENV).unwrap_or_else(|_| "/proxy/".to_string())
}

#[derive(Debug, Serialize, Deserialize)]
pub struct OidcConfig {
    pub client_id: String,
    pub client_secret: String,
    pub redirect_url: String,
}

#[derive(Debug, Serialize, Deserialize)]
pub struct AppConfig {
    pub base_url: String,
    pub email_config: EmailConfig,
    pub google_oidc: Option<OidcConfig>,
    pub upload_private_key: Option<String>,
    pub upload_jwks: Option<String>,
}