mirror of
https://github.com/bitwarden/server.git
synced 2026-02-11 11:23:14 +08:00
* [PM-1188] add sso project to auth * [PM-1188] move sso api models to auth * [PM-1188] fix sso api model namespace & imports * [PM-1188] move core files to auth * [PM-1188] fix core sso namespace & models * [PM-1188] move sso repository files to auth * [PM-1188] fix sso repo files namespace & imports * [PM-1188] move sso sql files to auth folder * [PM-1188] move sso test files to auth folders * [PM-1188] fix sso tests namespace & imports * [PM-1188] move auth api files to auth folder * [PM-1188] fix auth api files namespace & imports * [PM-1188] move auth core files to auth folder * [PM-1188] fix auth core files namespace & imports * [PM-1188] move auth email templates to auth folder * [PM-1188] move auth email folder back into shared directory * [PM-1188] fix auth email names * [PM-1188] move auth core models to auth folder * [PM-1188] fix auth model namespace & imports * [PM-1188] add entire Identity project to auth codeowners * [PM-1188] fix auth orm files namespace & imports * [PM-1188] move auth orm files to auth folder * [PM-1188] move auth sql files to auth folder * [PM-1188] move auth tests to auth folder * [PM-1188] fix auth test files namespace & imports * [PM-1188] move emergency access api files to auth folder * [PM-1188] fix emergencyaccess api files namespace & imports * [PM-1188] move emergency access core files to auth folder * [PM-1188] fix emergency access core files namespace & imports * [PM-1188] move emergency access orm files to auth folder * [PM-1188] fix emergency access orm files namespace & imports * [PM-1188] move emergency access sql files to auth folder * [PM-1188] move emergencyaccess test files to auth folder * [PM-1188] fix emergency access test files namespace & imports * [PM-1188] move captcha files to auth folder * [PM-1188] fix captcha files namespace & imports * [PM-1188] move auth admin files into auth folder * [PM-1188] fix admin auth files namespace & imports - configure mvc to look in auth folders for views * [PM-1188] remove extra imports and formatting * [PM-1188] fix ef auth model imports * [PM-1188] fix DatabaseContextModelSnapshot paths * [PM-1188] fix grant import in ef * [PM-1188] update sqlproj * [PM-1188] move missed sqlproj files * [PM-1188] move auth ef models out of auth folder * [PM-1188] fix auth ef models namespace * [PM-1188] remove auth ef models unused imports * [PM-1188] fix imports for auth ef models * [PM-1188] fix more ef model imports * [PM-1188] fix file encodings
161 lines
5.1 KiB
C#
161 lines
5.1 KiB
C#
using System.Globalization;
|
|
using Bit.Admin.IdentityServer;
|
|
using Bit.Core.Context;
|
|
using Bit.Core.Settings;
|
|
using Bit.Core.Utilities;
|
|
using Bit.SharedWeb.Utilities;
|
|
using Microsoft.AspNetCore.Identity;
|
|
using Stripe;
|
|
using Microsoft.AspNetCore.Mvc.Razor;
|
|
|
|
#if !OSS
|
|
using Bit.Commercial.Core.Utilities;
|
|
#endif
|
|
|
|
namespace Bit.Admin;
|
|
|
|
public class Startup
|
|
{
|
|
public Startup(IWebHostEnvironment env, IConfiguration configuration)
|
|
{
|
|
CultureInfo.DefaultThreadCurrentCulture = new CultureInfo("en-US");
|
|
Configuration = configuration;
|
|
Environment = env;
|
|
}
|
|
|
|
public IConfiguration Configuration { get; private set; }
|
|
public IWebHostEnvironment Environment { get; set; }
|
|
|
|
public void ConfigureServices(IServiceCollection services)
|
|
{
|
|
// Options
|
|
services.AddOptions();
|
|
|
|
// Settings
|
|
var globalSettings = services.AddGlobalSettingsServices(Configuration, Environment);
|
|
services.Configure<AdminSettings>(Configuration.GetSection("AdminSettings"));
|
|
|
|
// Data Protection
|
|
services.AddCustomDataProtectionServices(Environment, globalSettings);
|
|
|
|
// Stripe Billing
|
|
StripeConfiguration.ApiKey = globalSettings.Stripe.ApiKey;
|
|
StripeConfiguration.MaxNetworkRetries = globalSettings.Stripe.MaxNetworkRetries;
|
|
|
|
// Repositories
|
|
var databaseProvider = services.AddDatabaseRepositories(globalSettings);
|
|
switch (databaseProvider)
|
|
{
|
|
case Core.Enums.SupportedDatabaseProviders.SqlServer:
|
|
services.AddSingleton<IDbMigrator, Migrator.SqlServerDbMigrator>();
|
|
break;
|
|
case Core.Enums.SupportedDatabaseProviders.MySql:
|
|
services.AddSingleton<IDbMigrator, MySqlMigrations.MySqlDbMigrator>();
|
|
break;
|
|
case Core.Enums.SupportedDatabaseProviders.Postgres:
|
|
services.AddSingleton<IDbMigrator, PostgresMigrations.PostgresDbMigrator>();
|
|
break;
|
|
case Core.Enums.SupportedDatabaseProviders.Sqlite:
|
|
services.AddSingleton<IDbMigrator, SqliteMigrations.SqliteDbMigrator>();
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
|
|
// Context
|
|
services.AddScoped<ICurrentContext, CurrentContext>();
|
|
|
|
// Identity
|
|
services.AddPasswordlessIdentityServices<ReadOnlyEnvIdentityUserStore>(globalSettings);
|
|
services.Configure<SecurityStampValidatorOptions>(options =>
|
|
{
|
|
options.ValidationInterval = TimeSpan.FromMinutes(5);
|
|
});
|
|
if (globalSettings.SelfHosted)
|
|
{
|
|
services.ConfigureApplicationCookie(options =>
|
|
{
|
|
options.Cookie.Path = "/admin";
|
|
});
|
|
}
|
|
|
|
// Services
|
|
services.AddBaseServices(globalSettings);
|
|
services.AddDefaultServices(globalSettings);
|
|
|
|
#if OSS
|
|
services.AddOosServices();
|
|
#else
|
|
services.AddCommercialCoreServices();
|
|
#endif
|
|
|
|
// Mvc
|
|
services.AddMvc(config =>
|
|
{
|
|
config.Filters.Add(new LoggingExceptionHandlerFilterAttribute());
|
|
});
|
|
services.Configure<RouteOptions>(options => options.LowercaseUrls = true);
|
|
|
|
services.Configure<RazorViewEngineOptions>(o =>
|
|
{
|
|
o.ViewLocationFormats.Add("/Auth/Views/{1}/{0}.cshtml");
|
|
});
|
|
|
|
// Jobs service
|
|
Jobs.JobsHostedService.AddJobsServices(services, globalSettings.SelfHosted);
|
|
services.AddHostedService<Jobs.JobsHostedService>();
|
|
if (globalSettings.SelfHosted)
|
|
{
|
|
services.AddHostedService<HostedServices.DatabaseMigrationHostedService>();
|
|
}
|
|
else
|
|
{
|
|
if (CoreHelpers.SettingHasValue(globalSettings.Storage.ConnectionString))
|
|
{
|
|
services.AddHostedService<HostedServices.AzureQueueBlockIpHostedService>();
|
|
}
|
|
else if (CoreHelpers.SettingHasValue(globalSettings.Amazon?.AccessKeySecret))
|
|
{
|
|
services.AddHostedService<HostedServices.AmazonSqsBlockIpHostedService>();
|
|
}
|
|
if (CoreHelpers.SettingHasValue(globalSettings.Mail.ConnectionString))
|
|
{
|
|
services.AddHostedService<HostedServices.AzureQueueMailHostedService>();
|
|
}
|
|
}
|
|
}
|
|
|
|
public void Configure(
|
|
IApplicationBuilder app,
|
|
IWebHostEnvironment env,
|
|
IHostApplicationLifetime appLifetime,
|
|
GlobalSettings globalSettings)
|
|
{
|
|
app.UseSerilog(env, appLifetime, globalSettings);
|
|
|
|
// Add general security headers
|
|
app.UseMiddleware<SecurityHeadersMiddleware>();
|
|
|
|
if (globalSettings.SelfHosted)
|
|
{
|
|
app.UsePathBase("/admin");
|
|
app.UseForwardedHeaders(globalSettings);
|
|
}
|
|
|
|
if (env.IsDevelopment())
|
|
{
|
|
app.UseDeveloperExceptionPage();
|
|
}
|
|
else
|
|
{
|
|
app.UseExceptionHandler("/error");
|
|
}
|
|
|
|
app.UseStaticFiles();
|
|
app.UseRouting();
|
|
app.UseAuthentication();
|
|
app.UseAuthorization();
|
|
app.UseEndpoints(endpoints => endpoints.MapDefaultControllerRoute());
|
|
}
|
|
}
|