-
Notifications
You must be signed in to change notification settings - Fork 1.4k
Expand file tree
/
Copy pathoauth2provider.go
More file actions
96 lines (85 loc) · 2.64 KB
/
Copy pathoauth2provider.go
File metadata and controls
96 lines (85 loc) · 2.64 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
package cli
import (
"fmt"
"golang.org/x/xerrors"
"github.com/coder/coder/v2/coderd/util/ptr"
"github.com/coder/coder/v2/codersdk"
"github.com/coder/serpent"
)
func (r *RootCmd) oauth2Provider() *serpent.Command {
cmd := &serpent.Command{
Use: "oauth2-provider",
Short: "Manage Coder OAuth2 provider settings",
Long: "Administrators can use these commands to change OAuth2 provider settings.\n" + FormatExamples(
Example{
Description: "Enable dynamic client registration (RFC 7591), allowing OAuth2/MCP clients to self-register without an admin creating an app first",
Command: "coder oauth2-provider dcr enable",
},
Example{
Description: "Disable dynamic client registration. Clients that already registered are unaffected; only new self-registration attempts are rejected",
Command: "coder oauth2-provider dcr disable",
},
),
Handler: func(inv *serpent.Invocation) error {
return inv.Command.HelpHandler(inv)
},
Children: []*serpent.Command{
r.oauth2ProviderDCR(),
},
}
return cmd
}
func (r *RootCmd) oauth2ProviderDCR() *serpent.Command {
cmd := &serpent.Command{
Use: "dcr",
Short: "Manage OAuth2 dynamic client registration (RFC 7591)",
Handler: func(inv *serpent.Invocation) error {
return inv.Command.HelpHandler(inv)
},
Children: []*serpent.Command{
r.oauth2ProviderDCRToggle(dcrToggleEnable),
r.oauth2ProviderDCRToggle(dcrToggleDisable),
},
}
return cmd
}
// dcrToggleAction distinguishes the "enable" and "disable" subcommands of
// `coder oauth2-provider dcr`, which are otherwise identical.
type dcrToggleAction int
const (
dcrToggleDisable dcrToggleAction = iota
dcrToggleEnable
)
func (r *RootCmd) oauth2ProviderDCRToggle(action dcrToggleAction) *serpent.Command {
enabled := action == dcrToggleEnable
use, short, verb := "disable", "Disable OAuth2 dynamic client registration", "disable"
if enabled {
use, short, verb = "enable", "Enable OAuth2 dynamic client registration", "enable"
}
cmd := &serpent.Command{
Use: use,
Short: short,
Middleware: serpent.Chain(
serpent.RequireNArgs(0),
),
Handler: func(inv *serpent.Invocation) error {
client, err := r.InitClient(inv)
if err != nil {
return err
}
_, err = client.PutOAuth2ProviderSettings(inv.Context(), codersdk.OAuth2ProviderSettings{
DynamicClientRegistrationEnabled: ptr.Ref(enabled),
})
if err != nil {
return xerrors.Errorf("unable to %s dynamic client registration: %w", verb, err)
}
state := "disabled"
if enabled {
state = "enabled"
}
_, _ = fmt.Fprintf(inv.Stderr, "Dynamic client registration is now %s.\n", state)
return nil
},
}
return cmd
}