-
Notifications
You must be signed in to change notification settings - Fork 162
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
depend more heavily on Microsoft libraries for auth, split auth types…
… to separate packages
- Loading branch information
Showing
166 changed files
with
1,872 additions
and
7,059 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
109 changes: 109 additions & 0 deletions
109
src/Common/src/Common.Security/CertificateConfigurationExtensions.cs
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,109 @@ | ||
| // Licensed to the .NET Foundation under one or more agreements. | ||
| // The .NET Foundation licenses this file to you under the Apache 2.0 License. | ||
| // See the LICENSE file in the project root for more information. | ||
|
|
||
| using Microsoft.Extensions.Configuration; | ||
| using Steeltoe.Common.Options; | ||
|
|
||
| namespace Steeltoe.Common.Security; | ||
|
|
||
| public static class CertificateConfigurationExtensions | ||
| { | ||
| /// <summary> | ||
| /// Adds file path information for a certificate and (optional) private key to configuration, for use with <see cref="CertificateOptions" />. | ||
| /// </summary> | ||
| /// <param name="builder"> | ||
| /// Your <see cref="IConfigurationBuilder" />. | ||
| /// </param> | ||
| /// <param name="certificateName"> | ||
| /// Name of the certificate. | ||
| /// </param> | ||
| /// <param name="certificateFilePath"> | ||
| /// The path on disk to locate a valid certificate file. | ||
| /// </param> | ||
| /// <param name="privateKeyFilePath"> | ||
| /// The path on disk to locate a valid pem-encoded RSA key. | ||
| /// </param> | ||
| public static IConfigurationBuilder AddCertificate(this IConfigurationBuilder builder, string certificateName, string certificateFilePath, | ||
| string? privateKeyFilePath = null) | ||
| { | ||
| ArgumentGuard.NotNull(builder); | ||
| ArgumentGuard.NotNullOrEmpty(certificateFilePath); | ||
|
|
||
| string keyPrefix = string.IsNullOrEmpty(certificateName) | ||
| ? $"{CertificateOptions.ConfigurationKeyPrefix}{ConfigurationPath.KeyDelimiter}" | ||
| : $"{CertificateOptions.ConfigurationKeyPrefix}{ConfigurationPath.KeyDelimiter}{certificateName}{ConfigurationPath.KeyDelimiter}"; | ||
|
|
||
| var keys = new Dictionary<string, string?> | ||
| { | ||
| { $"{keyPrefix}CertificateFilePath", certificateFilePath } | ||
| }; | ||
|
|
||
| if (!string.IsNullOrEmpty(privateKeyFilePath)) | ||
| { | ||
| keys[$"{keyPrefix}PrivateKeyFilePath"] = privateKeyFilePath; | ||
| } | ||
|
|
||
| builder.AddInMemoryCollection(keys); | ||
| return builder; | ||
| } | ||
|
|
||
| /// <summary> | ||
| /// Adds PEM files representing application identity to application configuration. When running outside of Cloud Foundry based platforms, | ||
| /// will create certificates resembling those found on the platform. | ||
| /// </summary> | ||
| /// <param name="builder"> | ||
| /// Your <see cref="IConfigurationBuilder" />. | ||
| /// </param> | ||
| /// <remarks> | ||
| /// Outside of Cloud Foundry, CA and Intermediate certificates will be created a directory above the current project so that they can | ||
| /// be shared between different projects operating in the same solution context. | ||
| /// </remarks> | ||
| public static IConfigurationBuilder AddContainerIdentityCertificate(this IConfigurationBuilder builder) | ||
| { | ||
| return builder.AddContainerIdentityCertificate(null, null); | ||
| } | ||
|
|
||
| /// <summary> | ||
| /// Adds PEM files representing application identity to application configuration. When running outside of Cloud Foundry based platforms, | ||
| /// will create certificates resembling those found on the platform. | ||
| /// </summary> | ||
| /// <param name="builder"> | ||
| /// Your <see cref="IConfigurationBuilder" />. | ||
| /// </param> | ||
| /// <param name="organizationId"> | ||
| /// (Optional) A GUID representing an organization, for use with Cloud Foundry certificate-based authorization | ||
| /// policy. | ||
| /// </param> | ||
| /// <param name="spaceId"> | ||
| /// (Optional) A GUID representing a space, for use with Cloud Foundry certificate-based authorization policy. | ||
| /// </param> | ||
| /// <remarks> | ||
| /// Outside of Cloud Foundry, CA and Intermediate certificates will be created a directory above the current project so that they can | ||
| /// be shared between different projects operating in the same solution context. | ||
| /// </remarks> | ||
| public static IConfigurationBuilder AddContainerIdentityCertificate(this IConfigurationBuilder builder, Guid? organizationId, Guid? spaceId) | ||
| { | ||
| if (!Platform.IsCloudFoundry) | ||
| { | ||
| organizationId ??= Guid.NewGuid(); | ||
| spaceId ??= Guid.NewGuid(); | ||
|
|
||
| var task = new LocalCertificateWriter(); | ||
| task.Write((Guid)organizationId, (Guid)spaceId); | ||
|
|
||
| Environment.SetEnvironmentVariable("CF_SYSTEM_CERT_PATH", Path.Combine(Directory.GetParent(LocalCertificateWriter.ApplicationBasePath)!.ToString(), "GeneratedCertificates")); | ||
|
|
||
| Environment.SetEnvironmentVariable("CF_INSTANCE_CERT", | ||
| Path.Combine(LocalCertificateWriter.ApplicationBasePath, "GeneratedCertificates", "SteeltoeInstanceCert.pem")); | ||
|
|
||
| Environment.SetEnvironmentVariable("CF_INSTANCE_KEY", | ||
| Path.Combine(LocalCertificateWriter.ApplicationBasePath, "GeneratedCertificates", "SteeltoeInstanceKey.pem")); | ||
| } | ||
|
|
||
| string? certificateFile = Environment.GetEnvironmentVariable("CF_INSTANCE_CERT"); | ||
| string? keyFile = Environment.GetEnvironmentVariable("CF_INSTANCE_KEY"); | ||
|
|
||
| return certificateFile == null || keyFile == null ? builder : builder.AddCertificate("ContainerIdentity", certificateFile, keyFile); | ||
| } | ||
| } |
Oops, something went wrong.