feat(apisix): add Cloudron package
- Implements Apache APISIX packaging for Cloudron platform. - Includes Dockerfile, CloudronManifest.json, and start.sh. - Configured to use Cloudron's etcd addon. 🤖 Generated with Gemini CLI Co-Authored-By: Gemini <noreply@google.com>
This commit is contained in:
@@ -0,0 +1,105 @@
|
||||
--
|
||||
-- Licensed to the Apache Software Foundation (ASF) under one or more
|
||||
-- contributor license agreements. See the NOTICE file distributed with
|
||||
-- this work for additional information regarding copyright ownership.
|
||||
-- The ASF licenses this file to You under the Apache License, Version 2.0
|
||||
-- (the "License"); you may not use this file except in compliance with
|
||||
-- the License. You may obtain a copy of the License at
|
||||
--
|
||||
-- http://www.apache.org/licenses/LICENSE-2.0
|
||||
--
|
||||
-- Unless required by applicable law or agreed to in writing, software
|
||||
-- distributed under the License is distributed on an "AS IS" BASIS,
|
||||
-- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
-- See the License for the specific language governing permissions and
|
||||
-- limitations under the License.
|
||||
--
|
||||
local core = require("apisix.core")
|
||||
local require = require
|
||||
local pairs = pairs
|
||||
local type = type
|
||||
local plugin = require("apisix.plugin")
|
||||
|
||||
local schema = {
|
||||
type = "object",
|
||||
title = "work with route or service object",
|
||||
properties = {
|
||||
auth_plugins = { type = "array", minItems = 2 }
|
||||
},
|
||||
required = { "auth_plugins" },
|
||||
}
|
||||
|
||||
|
||||
local plugin_name = "multi-auth"
|
||||
|
||||
local _M = {
|
||||
version = 0.1,
|
||||
priority = 2600,
|
||||
type = 'auth',
|
||||
name = plugin_name,
|
||||
schema = schema
|
||||
}
|
||||
|
||||
function _M.check_schema(conf)
|
||||
local ok, err = core.schema.check(schema, conf)
|
||||
if not ok then
|
||||
return false, err
|
||||
end
|
||||
|
||||
local auth_plugins = conf.auth_plugins
|
||||
for k, auth_plugin in pairs(auth_plugins) do
|
||||
for auth_plugin_name, auth_plugin_conf in pairs(auth_plugin) do
|
||||
local auth = plugin.get(auth_plugin_name)
|
||||
if auth == nil then
|
||||
return false, auth_plugin_name .. " plugin did not found"
|
||||
else
|
||||
if auth.type ~= 'auth' then
|
||||
return false, auth_plugin_name .. " plugin is not supported"
|
||||
end
|
||||
local ok, err = auth.check_schema(auth_plugin_conf, auth.schema)
|
||||
if not ok then
|
||||
return false, "plugin " .. auth_plugin_name .. " check schema failed: " .. err
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
return true
|
||||
end
|
||||
|
||||
function _M.rewrite(conf, ctx)
|
||||
local auth_plugins = conf.auth_plugins
|
||||
local status_code
|
||||
local errors = {}
|
||||
|
||||
for k, auth_plugin in pairs(auth_plugins) do
|
||||
for auth_plugin_name, auth_plugin_conf in pairs(auth_plugin) do
|
||||
local auth = plugin.get(auth_plugin_name)
|
||||
-- returns 401 HTTP status code if authentication failed, otherwise returns nothing.
|
||||
local auth_code, err = auth.rewrite(auth_plugin_conf, ctx)
|
||||
if type(err) == "table" then
|
||||
err = err.message -- compat
|
||||
end
|
||||
|
||||
status_code = auth_code
|
||||
if auth_code == nil then
|
||||
core.log.debug(auth_plugin_name .. " succeed to authenticate the request")
|
||||
goto authenticated
|
||||
else
|
||||
core.table.insert(errors, auth_plugin_name ..
|
||||
" failed to authenticate the request, code: "
|
||||
.. auth_code .. ". error: " .. err)
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
:: authenticated ::
|
||||
if status_code ~= nil then
|
||||
for _, error in pairs(errors) do
|
||||
core.log.warn(error)
|
||||
end
|
||||
return 401, { message = "Authorization Failed" }
|
||||
end
|
||||
end
|
||||
|
||||
return _M
|
Reference in New Issue
Block a user