wn/traefik-forward-auth
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

role added to configuration

Browse Source
This commit is contained in:
Wolfgang Hottgenroth 2023-11-06 22:25:00 +01:00
parent f6120640d2
commit fb24320552
Signed by: wn
GPG Key ID: 836E9E1192A6B132
3 changed files with 4 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
internal/config.go
View File

@ -48,6 +48,9 @@ type Config struct {
Secret []byte `json:"-"`
Lifetime time.Duration
// Authorization
RequiredRole string `long:"required-role" env:"REQUIRED_ROLE" description:"Required role to verify authorization"`
// Legacy
CookieDomainsLegacy CookieDomains `long:"cookie-domains" env:"COOKIE_DOMAINS" description:"DEPRECATED - Use \"cookie-domain\""`
CookieSecretLegacy string `long:"cookie-secret" env:"COOKIE_SECRET" description:"DEPRECATED - Use \"secret\"" json:"-"`

8
internal/provider/oidc.go
View File

@ -3,7 +3,6 @@ package provider
import (
"context"
"errors"
"fmt"
"github.com/coreos/go-oidc"
"golang.org/x/oauth2"
@ -99,9 +98,6 @@ func (o *OIDC) GetUser(token string) (User, Roles, error) {
return user, roles, err
}
o.log.WithField("idToken", idToken).Debug("getUser")
// Extract custom claims
if err := idToken.Claims(&user); err != nil {
return user, roles, err
@ -112,10 +108,6 @@ func (o *OIDC) GetUser(token string) (User, Roles, error) {
return user, roles, err
}
o.log.WithField("roles", roles).Debug("getUser")
for i, r := range roles.Roles {
o.log.Debug(fmt.Sprintf("%d, %s", i, r))
}
return user, roles, nil
}

2
internal/server.go
View File

@ -186,7 +186,7 @@ func (s *Server) AuthCallbackHandler() http.HandlerFunc {
}
found := false
for _, r := range roles.Roles {
if r == "whoami_admin" {
if r == config.RequiredRole {
found = true
}
}