authentification OpenID Connect (Keycloak) : flux authorization code, state signé, validation du token ID via JWKS, provisioning automatique des utilisateurs

backend/internal/adapter/database/factory.go

@@ -11,6 +11,7 @@ import (
 type Database interface {
 	SettingsRepository() domain.SettingsRepository
 	UserRepository() domain.UserRepository
+	OIDCProviderRepository() domain.OIDCProviderRepository
 	FileRepository() domain.FileRepository
 	ProviderRepository() domain.ProviderRepository
 	AgentRepository() domain.AgentRepository

backend/internal/adapter/database/turso/db.go

@@ -64,6 +64,10 @@ func (db *TursoDB) SettingsRepository() domain.SettingsRepository {
 	return NewTursoSettingsRepository(db.DB)
 }
 
+func (db *TursoDB) OIDCProviderRepository() domain.OIDCProviderRepository {
+	return NewTursoOIDCProviderRepository(db.DB)
+}
+
 func (db *TursoDB) FileRepository() domain.FileRepository {
 	return NewTursoFileRepository(db.DB)
 }

backend/internal/adapter/database/turso/oidc_repository.go

@@ -0,0 +1,34 @@
+package turso
+
+import (
+	"database/sql"
+	"log"
+
+	"trankilou.fr/lassistanoque/backend/internal/adapter/database/orm"
+	"trankilou.fr/lassistanoque/backend/internal/domain"
+)
+
+type TursoOIDCProviderRepository struct {
+	db           *sql.DB
+	OIDCTable    orm.Table[domain.OIDCProvider]
+}
+
+func NewTursoOIDCProviderRepository(db *sql.DB) *TursoOIDCProviderRepository {
+	dialect := orm.NewSqliteDialect()
+	oidcTable, err := orm.NewTable[domain.OIDCProvider](db, dialect, "oidc")
+	if err != nil {
+		log.Fatalf("error creating oidc provider table")
+	}
+	return &TursoOIDCProviderRepository{
+		db:        db,
+		OIDCTable: oidcTable,
+	}
+}
+
+func (or *TursoOIDCProviderRepository) ListOIDCProviders() ([]*domain.OIDCProvider, error) {
+	return or.OIDCTable.Select(orm.WithOrder("label asc"))
+}
+
+func (or *TursoOIDCProviderRepository) FindOIDCProvider(id string) (*domain.OIDCProvider, error) {
+	return or.OIDCTable.Get(id)
+}