moving audit to pics folder
This commit is contained in:
parent
b71c2f8857
commit
6e288ec2b6
|
|
@ -25,11 +25,11 @@ import (
|
|||
sessionsapi "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/apis/sessions"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/app/pagewriter"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/app/redirect"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/audit"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/authentication/basic"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/cookies"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/encryption"
|
||||
proxyhttp "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/http"
|
||||
picsaudit "github.com/oauth2-proxy/oauth2-proxy/v7/pkg/pics/audit"
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/util"
|
||||
|
||||
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/ip"
|
||||
|
|
@ -114,7 +114,8 @@ type OAuthProxy struct {
|
|||
appDirector redirect.AppDirector
|
||||
|
||||
encodeState bool
|
||||
AuditClient *audit.Client
|
||||
|
||||
picsAuditClient *picsaudit.Client
|
||||
}
|
||||
|
||||
// NewOAuthProxy creates a new instance of OAuthProxy from the options provided
|
||||
|
|
@ -213,7 +214,7 @@ func NewOAuthProxy(opts *options.Options, validator func(string) bool) (*OAuthPr
|
|||
Validator: redirectValidator,
|
||||
})
|
||||
|
||||
auditClient, err := audit.NewAuditClient(&audit.ClientOpts{
|
||||
picsAuditClient, err := picsaudit.NewAuditClient(&picsaudit.ClientOpts{
|
||||
URL: opts.AuditURL,
|
||||
Enabled: opts.EnableAudit,
|
||||
ProductName: opts.AuditProductName,
|
||||
|
|
@ -256,7 +257,7 @@ func NewOAuthProxy(opts *options.Options, validator func(string) bool) (*OAuthPr
|
|||
redirectValidator: redirectValidator,
|
||||
appDirector: appDirector,
|
||||
encodeState: opts.EncodeState,
|
||||
AuditClient: auditClient,
|
||||
picsAuditClient: picsAuditClient,
|
||||
}
|
||||
p.buildServeMux(opts.ProxyPrefix)
|
||||
|
||||
|
|
@ -925,7 +926,7 @@ func (p *OAuthProxy) OAuthCallback(rw http.ResponseWriter, req *http.Request) {
|
|||
if !csrf.CheckOAuthState(nonce) {
|
||||
errorMsg := "Invalid authentication via OAuth2: CSRF token mismatch, potential attack"
|
||||
logger.PrintAuthf(session.Email, req, logger.AuthFailure, errorMsg)
|
||||
p.AuditClient.CreateFailedLoginAuditEntry(session, appRedirect, req.Header.Get("edisp-org-id"), errorMsg)
|
||||
p.picsAuditClient.CreateFailedLoginAuditEntry(session, appRedirect, req.Header.Get("edisp-org-id"), errorMsg)
|
||||
p.ErrorPage(rw, req, http.StatusForbidden, "CSRF token mismatch, potential attack", "Login Failed: Unable to find a valid CSRF token. Please try again.")
|
||||
return
|
||||
}
|
||||
|
|
@ -954,7 +955,7 @@ func (p *OAuthProxy) OAuthCallback(rw http.ResponseWriter, req *http.Request) {
|
|||
p.ErrorPage(rw, req, http.StatusInternalServerError, err.Error())
|
||||
return
|
||||
}
|
||||
p.AuditClient.CreateSuccessfulLoginAuditEntry(session, appRedirect, req.Header.Get("edisp-org-id"))
|
||||
p.picsAuditClient.CreateSuccessfulLoginAuditEntry(session, appRedirect, req.Header.Get("edisp-org-id"))
|
||||
http.Redirect(rw, req, appRedirect, http.StatusFound)
|
||||
} else {
|
||||
logger.PrintAuthf(session.Email, req, logger.AuthFailure, "Invalid authentication via OAuth2: unauthorized")
|
||||
|
|
|
|||
|
|
@ -33,7 +33,7 @@ type Client struct {
|
|||
func NewAuditClient(opts *ClientOpts) (*Client, error) {
|
||||
if opts.Enabled {
|
||||
log.Print("Audit entries will be created since OAUTH2_PROXY_ENABLE_AUDIT is true")
|
||||
err := opts.Validate()
|
||||
err := opts.validate()
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
|
|
@ -154,7 +154,7 @@ func (c *Client) send(msg string) error {
|
|||
return nil
|
||||
}
|
||||
|
||||
func (c *ClientOpts) Validate() error {
|
||||
func (c *ClientOpts) validate() error {
|
||||
err := errors.New("")
|
||||
if strings.TrimSpace(c.URL) == "" {
|
||||
err = errors.New("the OAUTH2_PROXY_AUDIT_URL must be set")
|
||||
|
|
@ -81,6 +81,7 @@ type ExtensionContent struct {
|
|||
URL string `json:"url,omitempty"`
|
||||
ValueString string `json:"valueString,omitempty"`
|
||||
}
|
||||
|
||||
type Extension struct {
|
||||
URL string `json:"url,omitempty"`
|
||||
Extension []*ExtensionContent `json:"extension,omitempty"`
|
||||
Loading…
Reference in New Issue