public_git
/
oauth2-proxy
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #15 from philips-forks/add_id_token_header 

Add id token header
This commit is contained in:
lohith-karlapudi 2022-08-16 18:04:38 +05:30 committed by GitHub
parent c211d0a4a8 c0fe7f62da
commit d47b3c22c7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 39 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
pkg/apis/options/legacy_options.go
View File

@ -234,7 +234,7 @@ func (l *LegacyHeaders) getRequestHeaders() []Header {
}
if l.PassAuthorization {
requestHeaders = append(requestHeaders, getAuthorizationHeader())
requestHeaders = append(requestHeaders, getAuthorizationHeader()...)
}
for i := range requestHeaders {
@ -259,7 +259,7 @@ func (l *LegacyHeaders) getResponseHeaders() []Header {
}
if l.SetAuthorization {
responseHeaders = append(responseHeaders, getAuthorizationHeader())
responseHeaders = append(responseHeaders, getAuthorizationHeader()...)
}
if l.SetIntrospectionValue {
@ -356,18 +356,31 @@ func getPassAccessTokenHeader() Header {
}
}
func getAuthorizationHeader() Header {
return Header{
Name: "Authorization",
Values: []HeaderValue{
{
ClaimSource: &ClaimSource{
Claim: "id_token",
Prefix: "Bearer ",
func getAuthorizationHeader() []Header {
headers := []Header{
{
Name: "Authorization",
Values: []HeaderValue{
{
ClaimSource: &ClaimSource{
Claim: "id_token",
Prefix: "Bearer ",
},
},
},
},
{
Name: "x-auth-request-id-token",
Values: []HeaderValue{
{
ClaimSource: &ClaimSource{
Claim: "id_token",
},
},
},
},
}
return headers
}
func getPreferredUsernameHeader() Header {

16
pkg/apis/options/legacy_options_test.go
View File

@ -471,6 +471,18 @@ var _ = Describe("Legacy Options", func() {
},
}
idTokenHeader := Header{
Name: "x-auth-request-id-token",
PreserveRequestValue: false,
Values: []HeaderValue{
{
ClaimSource: &ClaimSource{
Claim: "id_token",
},
},
},
}
DescribeTable("should convert to injectRequestHeaders",
func(in legacyHeadersTableInput) {
requestHeaders, responseHeaders := in.legacyHeaders.convert()
@ -771,9 +783,11 @@ var _ = Describe("Legacy Options", func() {
},
expectedRequestHeaders: []Header{
authorizationHeader,
idTokenHeader,
},
expectedResponseHeaders: []Header{
authorizationHeader,
idTokenHeader,
},
}),
Entry("with authorization headers and SkipAuthStripHeaders disabled", legacyHeadersTableInput{
@ -793,9 +807,11 @@ var _ = Describe("Legacy Options", func() {
},
expectedRequestHeaders: []Header{
withPreserveRequestValue(authorizationHeader, true),
withPreserveRequestValue(idTokenHeader, true),
},
expectedResponseHeaders: []Header{
authorizationHeader,
idTokenHeader,
},
}),
)