//Handler creates a much with handlers for all routes in the roll application
func Handler(core *roll.Core) http.Handler {
mux := http.NewServeMux()
//Wrap roll services with the auth checker if booted in secure mode
if core.Secure() {
rollClientID := os.Getenv("ROLL_CLIENTID")
if rollClientID == "" {
panic(errors.New("Cannot run in secure mode without a client ID to white list (from ROLL_CLIENTID env variable)"))
}
whitelist := []string{rollClientID}
mux.Handle(DevelopersBaseURI, authzwrapper.Wrap(core.SecretsRepo, core.AdminRepo, whitelist, handleDevelopersBase(core)))
mux.Handle(DevelopersURI, authzwrapper.Wrap(core.SecretsRepo, core.AdminRepo, whitelist, handleDevelopers(core)))
mux.Handle(ApplicationsURI, authzwrapper.Wrap(core.SecretsRepo, core.AdminRepo, whitelist, handleApplications(core)))
mux.Handle(ApplicationsBaseURI, authzwrapper.Wrap(core.SecretsRepo, core.AdminRepo, whitelist, handleApplicationsBase(core)))
mux.Handle(JWTFlowCertsURI, authzwrapper.Wrap(core.SecretsRepo, core.AdminRepo, whitelist, handleJWTFlowCerts(core)))
} else {
mux.Handle(DevelopersBaseURI, authzwrapper.WrapUnsecure(handleDevelopersBase(core)))
mux.Handle(DevelopersURI, authzwrapper.WrapUnsecure(handleDevelopers(core)))
mux.Handle(ApplicationsURI, authzwrapper.WrapUnsecure(handleApplications(core)))
mux.Handle(ApplicationsBaseURI, authzwrapper.WrapUnsecure(handleApplicationsBase(core)))
mux.Handle(JWTFlowCertsURI, authzwrapper.WrapUnsecure(handleJWTFlowCerts(core)))
}
mux.Handle(AuthorizeBaseURI, handleAuthorize(core))
mux.Handle(ValidateBaseURI, handleValidate(core))
mux.Handle(OAuth2TokenBaseURI, handleToken(core))
mux.Handle(TokenInfoURI, handleTokenInfo(core))
return mux
}
func main() {
var port = flag.Int("port", -1, "Port to listen on")
flag.Parse()
if *port == -1 {
fmt.Println("Must specify a -port argument")
return
}
var whitelisted = readWhitelistClientIDFromEnv()
mux := http.NewServeMux()
mux.Handle("/echoclient", echoClientHandler())
mux.Handle("/oauth2_callback", oauthCallbackHandler())
mux.Handle("/echosvc", az.Wrap(secretsrepo.NewVaultSecretsRepo(), repos.NewDynamoAdminRepo(), []string{whitelisted}, echoServiceHandler()))
http.ListenAndServe(fmt.Sprintf(":%d", *port), mux)
}