Method Setup

internal/bootstrap/app_bootstrap.go:46–235

()

}

func (app *BootstrapApp) Setup() error {
	fmt.Println("Tinyauth is moving to an organization! All versions after v5.0.7 will be released under ghcr.io/tinyauthapp/tinyauth. Existing images will continue to work but new features and updates (including security ones) will only be released under the new image path.")

	// get app url
	if app.config.AppURL == "" {
		return fmt.Errorf("app URL cannot be empty, perhaps config loading failed")
	}

	appUrl, err := url.Parse(app.config.AppURL)

	if err != nil {
		return err
	}

	app.context.appUrl = appUrl.Scheme + "://" + appUrl.Host

	// validate session config
	if app.config.Auth.SessionMaxLifetime != 0 && app.config.Auth.SessionMaxLifetime < app.config.Auth.SessionExpiry {
		return fmt.Errorf("session max lifetime cannot be less than session expiry")
	}

	// Parse users
	users, err := utils.GetUsers(app.config.Auth.Users, app.config.Auth.UsersFile)

	if err != nil {
		return err
	}

	app.context.users = users

	// Setup OAuth providers
	app.context.oauthProviders = app.config.OAuth.Providers

	for name, provider := range app.context.oauthProviders {
		secret := utils.GetSecret(provider.ClientSecret, provider.ClientSecretFile)
		provider.ClientSecret = secret
		provider.ClientSecretFile = ""

		if provider.RedirectURL == "" {
			provider.RedirectURL = app.context.appUrl + "/api/oauth/callback/" + name
		}

		app.context.oauthProviders[name] = provider
	}

	for id, provider := range app.context.oauthProviders {
		if provider.Name == "" {
			if name, ok := config.OverrideProviders[id]; ok {
				provider.Name = name
			} else {
				provider.Name = utils.Capitalize(id)
			}
		}
		app.context.oauthProviders[id] = provider
	}

	// Setup OIDC clients
	for id, client := range app.config.OIDC.Clients {