repo-mirrors/traefik-github-oauth-plugin
1
0
Fork 0
mirror of https://github.com/MuXiu1997/traefik-github-oauth-plugin synced 2025-12-17 18:31:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(middleware): redirect only on get requests

Browse Source
This commit is contained in:
MuXiu1997
2023-01-27 13:22:10 +08:00
parent 1701487bc4
commit 61af42ceb3
1 changed files with 14 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
middleware_plugin.go
View File

@@ -8,10 +8,10 @@ import (
"net/http"
"strings"
"github.com/dghubble/sling"
"github.com/MuXiu1997/traefik-github-oauth-plugin/internal/app/traefik-github-oauth-server/model"
"github.com/MuXiu1997/traefik-github-oauth-plugin/internal/pkg/constant"
"github.com/MuXiu1997/traefik-github-oauth-plugin/internal/pkg/jwt"
"github.com/dghubble/sling"
"github.com/scylladb/go-set/strset"
)
@@ -97,14 +97,12 @@ func (p *TraefikGithubOauthMiddleware) ServeHTTP(rw http.ResponseWriter, req *ht
// handleRequest
func (p *TraefikGithubOauthMiddleware) handleRequest(rw http.ResponseWriter, req *http.Request) {
jwtCookie, err := req.Cookie(constant.COOKIE_NAME_JWT)
user, err := p.getGitHubUserFromCookie(req)
if err != nil {
p.redirectToOAuthPage(rw, req)
return
}
user, err := jwt.ParseTokenString(jwtCookie.Value, p.jwtSecretKey)
if err != nil {
p.redirectToOAuthPage(rw, req)
if req.Method == http.MethodGet {
p.redirectToOAuthPage(rw, req)
}
http.Error(rw, err.Error(), http.StatusUnauthorized)
return
}
if !p.whitelistIdSet.Has(user.Id) && !p.whitelistLoginSet.Has(user.Login) {
@@ -192,6 +190,14 @@ func (p *TraefikGithubOauthMiddleware) getAuthResult(rid string) (*model.Respons
return &respBody, nil
}
func (p *TraefikGithubOauthMiddleware) getGitHubUserFromCookie(req *http.Request) (*jwt.PayloadUser, error) {
jwtCookie, err := req.Cookie(constant.COOKIE_NAME_JWT)
if err != nil {
return nil, err
}
return jwt.ParseTokenString(jwtCookie.Value, p.jwtSecretKey)
}
func (p *TraefikGithubOauthMiddleware) getAuthURL(originalReq *http.Request) string {
var builder strings.Builder
scheme := "http"