 3c1b70c355
			
		
	
	3c1b70c355
	
	
	
		
			
			* outposts/proxyv2: initial commit Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add rs256 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> more stuff Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add forward auth an sign_out Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> match cookie name Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> re-add support for rs256 for backwards compat Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add error handler Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> ensure unique user-agent is used Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> set cookie duration based on id_token expiry Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> build proxy v2 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add ssl Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add basic auth and custom header support Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add application cert loading Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> implement whitelist Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add redis Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> migrate embedded outpost to v2 Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> remove old proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> providers/proxy: make token expiration configurable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> add metrics Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> fix tests Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * providers/proxy: only allow one redirect URI Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix docker build for proxy Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * remove default port offset Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * add AUTHENTIK_HOST_BROWSER Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tests: fix e2e/integration tests not using proper tags Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * remove references of old port Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * fix user_attributes not being loaded correctly Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * cleanup dependencies Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * cleanup Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
		
			
				
	
	
		
			57 lines
		
	
	
		
			1.3 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			57 lines
		
	
	
		
			1.3 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
| package application
 | |
| 
 | |
| import (
 | |
| 	"fmt"
 | |
| 	"net/http"
 | |
| 	"strconv"
 | |
| 
 | |
| 	"goauthentik.io/internal/outpost/proxyv2/constants"
 | |
| )
 | |
| 
 | |
| func (a *Application) redirectToStart(rw http.ResponseWriter, r *http.Request) {
 | |
| 	authUrl := fmt.Sprintf("%s/akprox/start", a.proxyConfig.ExternalHost)
 | |
| 	http.Redirect(rw, r, authUrl, http.StatusFound)
 | |
| }
 | |
| 
 | |
| // getClaims Get claims which are currently in session
 | |
| // Returns an error if the session can't be loaded or the claims can't be parsed/type-cast
 | |
| func (a *Application) getClaims(r *http.Request) (*Claims, error) {
 | |
| 	s, err := a.sessions.Get(r, constants.SeesionName)
 | |
| 	if err != nil {
 | |
| 		// err == user has no session/session is not valid, reject
 | |
| 		return nil, fmt.Errorf("invalid session")
 | |
| 	}
 | |
| 	claims, ok := s.Values[constants.SessionClaims]
 | |
| 	if claims == nil || !ok {
 | |
| 		// no claims saved, reject
 | |
| 		return nil, fmt.Errorf("invalid session")
 | |
| 	}
 | |
| 	c, ok := claims.(Claims)
 | |
| 	if !ok {
 | |
| 		return nil, fmt.Errorf("invalid session")
 | |
| 	}
 | |
| 	return &c, nil
 | |
| }
 | |
| 
 | |
| func contains(s []string, e string) bool {
 | |
| 	for _, a := range s {
 | |
| 		if a == e {
 | |
| 			return true
 | |
| 		}
 | |
| 	}
 | |
| 	return false
 | |
| }
 | |
| 
 | |
| // toString Generic to string function, currently supports actual strings and integers
 | |
| func toString(in interface{}) string {
 | |
| 	switch v := in.(type) {
 | |
| 	case string:
 | |
| 		return v
 | |
| 	case *string:
 | |
| 		return *v
 | |
| 	case int:
 | |
| 		return strconv.Itoa(v)
 | |
| 	}
 | |
| 	return ""
 | |
| }
 |