Method getConfig

src/FileRise/Domain/AdminModel.php:942–1345

* Retrieves the current configuration. * * @return array The configuration array, or defaults if not found. */

()

     * @return array The configuration array, or defaults if not found.
     */
    public static function getConfig(): array
    {
        $configFile = USERS_DIR . 'adminConfig.json';

        if (file_exists($configFile)) {
            $encryptedContent = file_get_contents($configFile);
            $decryptedContent = decryptData($encryptedContent, $GLOBALS['encryptionKey']);
            if ($decryptedContent === false) {
                clearstatcache(true, $configFile);
                $retryContent = @file_get_contents($configFile);
                if (is_string($retryContent) && $retryContent !== '') {
                    $encryptedContent = $retryContent;
                    $decryptedContent = decryptData($encryptedContent, $GLOBALS['encryptionKey']);
                }
            }

            if ($decryptedContent === false) {
                $rawConfig = json_decode((string)$encryptedContent, true);
                if (is_array($rawConfig)) {
                    $config = $rawConfig;
                } else {
                    // Do not set HTTP status here; let the controller decide.
                    return ["error" => "Failed to decrypt configuration."];
                }
            } else {
                $config = json_decode($decryptedContent, true);
            }

            if (!is_array($config)) {
                $config = [];
            }

            // Normalize login options if missing
            if (!isset($config['loginOptions'])) {
                // Migrate legacy top-level flags; default OIDC to true (disabled)
                $config['loginOptions'] = [
                    'disableFormLogin' => isset($config['disableFormLogin']) ? (bool)$config['disableFormLogin'] : false,
                    'disableBasicAuth' => isset($config['disableBasicAuth']) ? (bool)$config['disableBasicAuth'] : false,
                    'disableOIDCLogin' => isset($config['disableOIDCLogin']) ? (bool)$config['disableOIDCLogin'] : true,
                ];
                unset($config['disableFormLogin'], $config['disableBasicAuth'], $config['disableOIDCLogin']);
            } else {
                // Normalize booleans; default OIDC to true (disabled) if missing
                $lo = &$config['loginOptions'];
                $lo['disableFormLogin'] = isset($lo['disableFormLogin']) ? (bool)$lo['disableFormLogin'] : false;
                $lo['disableBasicAuth'] = isset($lo['disableBasicAuth']) ? (bool)$lo['disableBasicAuth'] : false;
                $lo['disableOIDCLogin'] = isset($lo['disableOIDCLogin']) ? (bool)$lo['disableOIDCLogin'] : true;
            }

            // Ensure OIDC structure exists
            if (!isset($config['oidc']) || !is_array($config['oidc'])) {
                $config['oidc'] = [
                    'providerUrl'  => '',
                    'clientId'     => '',
                    'clientSecret' => '',
                    'redirectUri'  => '',
                    'groupClaim'   => '',
                    'extraScopes'  => '',