config.go

package corbado

import (
	"net/http"
	"os"
	"time"

	"github.com/pkg/errors"

	"github.com/corbado/corbado-go/v2/internal/assert"
	"github.com/corbado/corbado-go/v2/pkg/generated/api"
)

type Config struct {
	ProjectID   string
	APISecret   string
	FrontendAPI string
	BackendAPI  string
	CacheMaxAge time.Duration

	JWKSRefreshInterval  time.Duration
	JWKSRefreshRateLimit time.Duration
	JWKSRefreshTimeout   time.Duration

	HTTPClient         *http.Client
	ExtraClientOptions []api.ClientOption
}

const (
	configDefaultCacheMaxAge = time.Minute

	configDefaultJWKSRefreshInterval  = time.Hour
	configDefaultJWKSRefreshRateLimit = 5 * time.Minute
	configDefaultJWKSRefreshTimeout   = 10 * time.Second
)

// NewConfig returns new config with sane defaults
func NewConfig(projectID string, apiSecret string, frontendAPI string, backendAPI string) (*Config, error) {
	if err := assert.StringNotEmpty(projectID); err != nil {
		return nil, err
	}

	if err := assert.StringNotEmpty(apiSecret); err != nil {
		return nil, err
	}

	if err := assert.StringNotEmpty(frontendAPI); err != nil {
		return nil, err
	}

	if err := assert.StringNotEmpty(backendAPI); err != nil {
		return nil, err
	}

	return &Config{
		ProjectID:            projectID,
		APISecret:            apiSecret,
		FrontendAPI:          frontendAPI,
		BackendAPI:           backendAPI,
		CacheMaxAge:          configDefaultCacheMaxAge,
		JWKSRefreshInterval:  configDefaultJWKSRefreshInterval,
		JWKSRefreshRateLimit: configDefaultJWKSRefreshRateLimit,
		JWKSRefreshTimeout:   configDefaultJWKSRefreshTimeout,
	}, nil
}

// NewConfigFromEnv created new config be reading the following environment variables: CORBADO_PROJECT_ID,
// CORBADO_API_SECRET, CORBADO_FRONTEND_API and CORBADO_BACKEND_API
func NewConfigFromEnv() (*Config, error) {
	return NewConfig(
		os.Getenv("CORBADO_PROJECT_ID"),
		os.Getenv("CORBADO_API_SECRET"),
		os.Getenv("CORBADO_FRONTEND_API"),
		os.Getenv("CORBADO_BACKEND_API"),
	)
}

func (c *Config) validate() error {
	if err := assert.ValidProjectID(c.ProjectID); err != nil {
		return errors.WithMessage(err, "Invalid ProjectID given")
	}

	if err := assert.ValidAPISecret(c.APISecret); err != nil {
		return errors.WithMessage(err, "Invalid APISecret given")
	}

	if err := assert.ValidAPIEndpoint(c.FrontendAPI); err != nil {
		return errors.WithMessage(err, "Invalid FrontendAPI given")
	}

	if err := assert.ValidAPIEndpoint(c.BackendAPI); err != nil {
		return errors.WithMessage(err, "Invalid BackendAPI given")
	}

	if err := assert.DurationNotEmpty(c.CacheMaxAge); err != nil {
		return errors.WithMessage(err, "Invalid CacheMaxAge given")
	}

	if err := assert.DurationNotEmpty(c.JWKSRefreshInterval); err != nil {
		return errors.WithMessage(err, "Invalid JWKSRefreshInterval given")
	}

	if err := assert.DurationNotEmpty(c.JWKSRefreshRateLimit); err != nil {
		return errors.WithMessage(err, "Invalid JWKSRefreshRateLimit given")
	}

	if err := assert.DurationNotEmpty(c.JWKSRefreshTimeout); err != nil {
		return errors.WithMessage(err, "Invalid JWKSRefreshTimeout given")
	}

	return nil
}