tulip/issuer/manager.go

package issuer

import (
	"fmt"
	"regexp"
	"strings"
)

var isValidNamespace = regexp.MustCompile("^[0-9a-z.]+$")

type Manager struct {
	m map[string]*WellKnownOIDC
}

func NewManager(services []SsoConfig) (*Manager, error) {
	l := &Manager{m: make(map[string]*WellKnownOIDC)}
	for _, i := range services {
		if !isValidNamespace.MatchString(i.Namespace) {
			return nil, fmt.Errorf("invalid namespace: %s", i.Namespace)
		}

		conf, err := i.FetchConfig()
		if err != nil {
			return nil, err
		}

		// save by namespace
		l.m[i.Namespace] = conf
	}
	return l, nil
}

func NewManagerForTests(services []*WellKnownOIDC) *Manager {
	l := &Manager{m: make(map[string]*WellKnownOIDC, len(services))}
	for _, i := range services {
		if !isValidNamespace.MatchString(i.Config.Namespace) {
			panic("Invalid namespace in tests")
		}
		l.m[i.Config.Namespace] = i
	}
	return l
}

func (l *Manager) CheckNamespace(namespace string) bool {
	_, ok := l.m[namespace]
	return ok
}

func (l *Manager) FindServiceFromLogin(login string) *WellKnownOIDC {
	// @ should have at least one byte before it
	n := strings.IndexByte(login, '@')
	if n < 1 {
		return nil
	}
	// there should not be a second @
	n2 := strings.IndexByte(login[n+1:], '@')
	if n2 != -1 {
		return nil
	}
	return l.m[login[n+1:]]
}