mirror of
https://github.com/phishingclub/phishingclub.git
synced 2026-07-04 03:17:58 +02:00
df555820f9
Add exclusive SSO login support. Signed-off-by: Ronni Skansing <rskansing@gmail.com>
75 lines
2.7 KiB
Go
75 lines
2.7 KiB
Go
package data
|
|
|
|
const (
|
|
OptionKeyIsInstalled = "is_installed"
|
|
OptionValueIsInstalled = "true"
|
|
OptionValueIsNotInstalled = "false"
|
|
// KeyIsInstalled is the key for the is_installed option
|
|
OptionKeyInstanceID = "instance_id"
|
|
|
|
OptionKeyLogLevel = "log_level"
|
|
OptionKeyDBLogLevel = "db_log_level"
|
|
|
|
OptionKeyUsingSystemd = "systemd_install"
|
|
OptionValueUsingSystemdYes = "true"
|
|
OptionValueUsingSystemdNo = "false"
|
|
|
|
OptionKeyDevelopmentSeeded = "development_seeded"
|
|
OptionValueSeeded = "true"
|
|
|
|
OptionKeyMaxFileUploadSizeMB = "max_file_upload_size_mb"
|
|
OptionValueKeyMaxFileUploadSizeMBDefault = "100"
|
|
|
|
OptionKeyRepeatOffenderMonths = "repeat_offender_months"
|
|
|
|
OptionKeyAdminSSOLogin = "sso_login"
|
|
|
|
// SSOProviderEntra is the Microsoft Entra ID provider, also the default when
|
|
// the stored provider type is empty so existing configurations keep working
|
|
SSOProviderEntra = "entra"
|
|
// SSOProviderOIDC is a generic OpenID Connect provider such as Keycloak
|
|
SSOProviderOIDC = "oidc"
|
|
|
|
// SSODefaultScopes are the OIDC scopes requested when none are configured
|
|
SSODefaultScopes = "openid profile email"
|
|
|
|
OptionKeyProxyCookieName = "proxy_cookie_name"
|
|
|
|
// OptionKeyRemoteBrowserWSPath is the seeded random path segment used for the
|
|
// victim-facing remote browser WebSocket endpoint. Randomised at first startup
|
|
// so the endpoint is not fingerprinted by path alone.
|
|
OptionKeyRemoteBrowserWSPath = "remote_browser_ws_path"
|
|
|
|
OptionKeyDisplayMode = "display_mode"
|
|
OptionValueDisplayModeWhitebox = "whitebox"
|
|
OptionValueDisplayModeBlackbox = "blackbox"
|
|
|
|
OptionKeyAutoPruneOrphanedRecipients = "auto_prune_orphaned_recipients"
|
|
|
|
OptionKeyReportPDFEnabled = "report_pdf_enabled"
|
|
|
|
// OptionKeyScimDomain is the single global domain on which SCIM provisioning
|
|
// endpoints are served by the phishing server. Empty disables SCIM serving.
|
|
OptionKeyScimDomain = "scim_domain"
|
|
|
|
// OptionKeyScimSoftDeleteRetentionDays is how many days a SCIM-disabled
|
|
// (soft-deleted) recipient is kept before being pruned (anonymized + deleted).
|
|
OptionKeyScimSoftDeleteRetentionDays = "scim_soft_delete_retention_days"
|
|
// OptionValueScimSoftDeleteRetentionDaysDefault is the default retention window.
|
|
OptionValueScimSoftDeleteRetentionDaysDefault = 30
|
|
|
|
OptionKeyObfuscationTemplate = "obfuscation_template"
|
|
// OptionValueObfuscationTemplateDefault is the default HTML template for obfuscation
|
|
// the template receives {{.Script}} variable containing the obfuscated javascript
|
|
OptionValueObfuscationTemplateDefault = `<!DOCTYPE html>
|
|
<html>
|
|
<head>
|
|
<meta charset="UTF-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
|
</head>
|
|
<body>
|
|
<script>{{.Script}}</script>
|
|
</body>
|
|
</html>`
|
|
)
|