mostly working

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

internal/outpost/radius/eap/protocol/peap/extension.go

@@ -4,6 +4,7 @@ import (
 	"encoding/binary"
 
 	log "github.com/sirupsen/logrus"
+	"goauthentik.io/internal/outpost/radius/eap/debug"
 	"goauthentik.io/internal/outpost/radius/eap/protocol"
 )
 
@@ -14,6 +15,7 @@ type ExtensionPayload struct {
 }
 
 func (ep *ExtensionPayload) Decode(raw []byte) error {
+	log.WithField("raw", debug.FormatBytes(raw)).Debugf("PEAP-Extension: decode raw")
 	ep.AVPs = []ExtensionAVP{}
 	offset := 0
 	for {
@@ -32,7 +34,7 @@ func (ep *ExtensionPayload) Decode(raw []byte) error {
 }
 
 func (ep *ExtensionPayload) Encode() ([]byte, error) {
-	log.Debug("PEAP: Extension encode")
+	log.Debug("PEAP-Extension: encode")
 	buff := []byte{}
 	for _, avp := range ep.AVPs {
 		buff = append(buff, avp.Encode()...)

internal/outpost/radius/eap/protocol/peap/payload.go

@@ -51,7 +51,7 @@ func (p *Payload) Decode(raw []byte) error {
 func (p *Payload) Encode() ([]byte, error) {
 	log.Debug("PEAP: Encoding inner EAP")
 	if p.eap.Payload == nil {
-		return []byte{}, errors.New("peap: no payload in response eap packet")
+		return []byte{}, errors.New("PEAP: no payload in response eap packet")
 	}
 	payload, err := p.eap.Payload.Encode()
 	if err != nil {
@@ -129,6 +129,7 @@ func (p *Payload) Handle(ctx protocol.Context) protocol.Payload {
 	res, err := ctx.HandleInnerEAP(ep, p)
 	if err != nil {
 		ctx.Log().WithError(err).Warning("PEAP: failed to handle inner EAP")
+		return nil
 	}
 	// Normal payloads need to be wrapped in PEAP to use the correct encoding (see Encode() above)
 	// Extension payloads handle encoding differently