Nicolas
0f5bdb7080
isAllowedMedia gère désormais "video/*", "*/*" et "*" en plus des types
exacts (comparaison insensible à la casse). parseConfig valide la forme des
entrées et lève ConfigError sur un joker malformé ("video/**", "vi*deo/mp4",
"video/") au lieu de laisser passer une liste qui ne matche rien.
Schéma + doc mis à jour. 62 tests.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
92 lines
3.2 KiB
JSON
92 lines
3.2 KiB
JSON
{
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"$id": "https://mediadrop.local/config.schema.json",
|
|
"title": "Configuration mediaDrop",
|
|
"type": "object",
|
|
"additionalProperties": false,
|
|
"required": ["publicUrl", "targets", "session", "oidc"],
|
|
"properties": {
|
|
"$schema": { "type": "string" },
|
|
"port": { "type": "integer", "minimum": 1, "maximum": 65535, "default": 3000 },
|
|
"host": { "type": "string", "default": "0.0.0.0" },
|
|
"publicUrl": {
|
|
"type": "string",
|
|
"format": "uri",
|
|
"description": "URL externe de base, ex. https://media.exemple.fr (sert à redirect_uri / post-logout)."
|
|
},
|
|
"targets": {
|
|
"type": "array",
|
|
"minItems": 1,
|
|
"description": "Dossiers nommés dans lesquels déposer. Le premier est la cible par défaut.",
|
|
"items": {
|
|
"type": "object",
|
|
"additionalProperties": false,
|
|
"required": ["name", "dir"],
|
|
"properties": {
|
|
"name": {
|
|
"type": "string",
|
|
"pattern": "^[A-Za-z0-9._-]+$",
|
|
"description": "Identifiant transmis par le client (?target=...)."
|
|
},
|
|
"label": { "type": "string", "description": "Libellé affiché (défaut : name)." },
|
|
"dir": { "type": "string", "description": "Chemin du dossier de destination." },
|
|
"allowDirectories": {
|
|
"type": "boolean",
|
|
"default": false,
|
|
"description": "Autoriser le dépôt de dossiers (arborescence recréée sous dir)."
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"maxFileSizeMb": { "type": "integer", "minimum": 1, "default": 512 },
|
|
"logLevel": {
|
|
"enum": ["fatal", "error", "warn", "info", "debug", "trace", "silent"],
|
|
"default": "info"
|
|
},
|
|
"allowedMimeTypes": {
|
|
"description": "\"all\", ou liste de types exacts et/ou jokers de préfixe (\"video/*\", \"*/*\", \"*\"). Absent => liste média par défaut.",
|
|
"oneOf": [
|
|
{ "const": "all" },
|
|
{
|
|
"type": "array",
|
|
"minItems": 1,
|
|
"items": { "type": "string", "pattern": "^(\\*|\\*/\\*|[^/*\\s]+/(\\*|[^/*\\s]+))$" }
|
|
}
|
|
]
|
|
},
|
|
"session": {
|
|
"type": "object",
|
|
"additionalProperties": false,
|
|
"required": ["key"],
|
|
"properties": {
|
|
"key": {
|
|
"type": "string",
|
|
"description": "32 octets encodés en base64. Générer avec : openssl rand -base64 32"
|
|
},
|
|
"maxAgeHours": { "type": "number", "exclusiveMinimum": 0, "default": 12 }
|
|
}
|
|
},
|
|
"oidc": {
|
|
"type": "object",
|
|
"additionalProperties": false,
|
|
"required": ["issuer", "clientId", "clientSecret"],
|
|
"properties": {
|
|
"issuer": {
|
|
"type": "string",
|
|
"format": "uri",
|
|
"description": "Issuer OIDC (le serveur lit <issuer>/.well-known/openid-configuration)."
|
|
},
|
|
"clientId": { "type": "string" },
|
|
"clientSecret": {
|
|
"type": "string",
|
|
"description": "Secret du client confidentiel déclaré côté fournisseur."
|
|
},
|
|
"scopes": {
|
|
"type": "array",
|
|
"items": { "type": "string" },
|
|
"default": ["openid", "profile", "email"]
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|