mrhid6
33b5ec0788
A pointer with absent meaning no cap, so an upgrade allows never-expire tokens exactly as before and an instance opts into the policy. It governs issuance only: changing it never invalidates a token that already exists.
74 lines
3.1 KiB
Go
74 lines
3.1 KiB
Go
package models
|
|
|
|
import (
|
|
"time"
|
|
|
|
"go.mongodb.org/mongo-driver/v2/bson"
|
|
)
|
|
|
|
// AlertSettings no longer carries a webhook URL or SMTP configuration of its
|
|
// own. Agent-offline alerts are delivered through notification channels, the
|
|
// same destinations monitors use, so there is one place to configure a
|
|
// destination and one place to test it.
|
|
type AlertSettings struct {
|
|
OfflineThresholdMinutes int `bson:"offline_threshold_minutes" json:"offline_threshold_minutes"`
|
|
OfflineChannelIDs []string `bson:"offline_channel_ids" json:"offline_channel_ids"`
|
|
}
|
|
|
|
type SecretsSettings struct {
|
|
ReadTokenHash string `bson:"read_token_hash,omitempty" json:"-"`
|
|
ReadTokenSet bool `bson:"-" json:"read_token_set"`
|
|
RotatedAt time.Time `bson:"rotated_at,omitempty" json:"rotated_at,omitempty"`
|
|
}
|
|
|
|
type Settings struct {
|
|
ID bson.ObjectID `bson:"_id,omitempty" json:"-"`
|
|
InstanceID string `bson:"instance_id" json:"instance_id"`
|
|
Alerts AlertSettings `bson:"alerts" json:"alerts"`
|
|
Secrets SecretsSettings `bson:"secrets" json:"secrets"`
|
|
|
|
WorkflowLogRetentionDays *int `bson:"workflow_log_retention_days,omitempty" json:"workflow_log_retention_days,omitempty"`
|
|
|
|
// LocalLoginEnabled is a pointer because it is absent on every settings
|
|
// document written before this feature existed, and a plain bool would read
|
|
// absent as disabled — turning off password login for the entire fleet at
|
|
// upgrade. Nil means enabled.
|
|
LocalLoginEnabled *bool `bson:"local_login_enabled,omitempty" json:"local_login_enabled,omitempty"`
|
|
|
|
// VulnFindingRetentionDays is a pointer for the same reason
|
|
// WorkflowLogRetentionDays is: absent must mean the default, not zero.
|
|
// Nil is 90 days, 0 is forever. Only "fixed" findings are ever swept.
|
|
VulnFindingRetentionDays *int `bson:"vuln_finding_retention_days,omitempty" json:"vuln_finding_retention_days,omitempty"`
|
|
|
|
// APITokenMaxDays caps how long a newly created API token may live.
|
|
//
|
|
// A pointer for the same reason the retention fields are: absent must mean
|
|
// the default, and the default here is no cap at all — never-expire tokens
|
|
// are allowed until an instance decides otherwise, so an upgrade changes
|
|
// nothing. Nil or 0 is no cap. A positive value refuses both a longer
|
|
// expiry and a token with no expiry.
|
|
//
|
|
// It is a policy on issuance, not on use: raising or lowering it never
|
|
// invalidates a token that already exists.
|
|
APITokenMaxDays *int `bson:"api_token_max_days,omitempty" json:"api_token_max_days,omitempty"`
|
|
}
|
|
|
|
// LocalLoginEnabled reads the setting with its absent-means-on default. Every
|
|
// caller must go through this rather than dereferencing the field.
|
|
func LocalLoginEnabled(s *Settings) bool {
|
|
if s == nil || s.LocalLoginEnabled == nil {
|
|
return true
|
|
}
|
|
return *s.LocalLoginEnabled
|
|
}
|
|
|
|
// APITokenMaxDays reads the token lifetime cap with its absent-means-uncapped
|
|
// default. 0 means no cap. Every caller must go through this rather than
|
|
// dereferencing the field.
|
|
func APITokenMaxDays(s *Settings) int {
|
|
if s == nil || s.APITokenMaxDays == nil || *s.APITokenMaxDays < 0 {
|
|
return 0
|
|
}
|
|
return *s.APITokenMaxDays
|
|
}
|