debugging for analyzing token

This commit is contained in:
2023-11-06 18:15:03 +01:00
parent c4317b7503
commit 5828a9a5a2
6 changed files with 23 additions and 5 deletions

View File

@ -6,6 +6,8 @@ import (
"github.com/coreos/go-oidc"
"golang.org/x/oauth2"
"github.com/sirupsen/logrus"
)
// OIDC provider
@ -18,6 +20,8 @@ type OIDC struct {
provider *oidc.Provider
verifier *oidc.IDTokenVerifier
log *logrus.Logger
}
// Name returns the name of the provider
@ -26,7 +30,9 @@ func (o *OIDC) Name() string {
}
// Setup performs validation and setup
func (o *OIDC) Setup() error {
func (o *OIDC) Setup(log *logrus.Logger) error {
o.log = log
// Check parms
if o.IssuerURL == "" || o.ClientID == "" || o.ClientSecret == "" {
return errors.New("providers.oidc.issuer-url, providers.oidc.client-id, providers.oidc.client-secret must be set")
@ -70,6 +76,7 @@ func (o *OIDC) ExchangeCode(redirectURI, code string) (string, error) {
if err != nil {
return "", err
}
o.log.WithField("accessToken", token.AccessToken).Debug("getUser")
// Extract ID token
rawIDToken, ok := token.Extra("id_token").(string)
@ -90,10 +97,15 @@ func (o *OIDC) GetUser(token string) (User, error) {
return user, err
}
o.log.WithField("idToken", idToken).Debug("getUser")
// Extract custom claims
if err := idToken.Claims(&user); err != nil {
return user, err
}
o.log.WithField("user", user).Debug("getUser")
return user, nil
}