oauth2-proxy/pics_oauthproxy.go

60 lines
1.5 KiB
Go

package main
import (
"encoding/base64"
"encoding/json"
"fmt"
"strings"
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/logger"
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/requests"
)
const (
picsSignOutAllDevicesPath = "/sign_out_all_sessions"
)
func PicsSignOutAllSessions(backendLogoutAllSessionsURL string, introspectClaims string, accessToken string) (resp requests.Result, err error) {
userID, err := getUserID(introspectClaims)
if err != nil {
return nil, fmt.Errorf("error getting userID from instrospect claims: %v", err)
}
backendLogoutURL := strings.ReplaceAll(backendLogoutAllSessionsURL, "{user_id}", userID)
resp = requests.New(backendLogoutURL).
WithMethod("POST").
SetHeader("Authorization", "Bearer "+accessToken).
SetHeader("API-Version", "1").
SetHeader("Accept", "application/json").
Do()
if resp.Error() != nil {
return nil, fmt.Errorf("error logging out from IAM: %v", err)
}
return resp, err
}
func getUserID(introspectClaims string) (string, error) {
decodedClaims, err := base64.StdEncoding.DecodeString(introspectClaims)
if err != nil {
logger.Errorf("error decoding claims: %v", err)
return "", err
}
var claims map[string]interface{}
err = json.Unmarshal(decodedClaims, &claims)
if err != nil {
logger.Errorf("error unmarshalling claims: %v", err)
return "", err
}
userID, ok := claims["sub"].(string)
if !ok {
logger.Errorf("error extracting 'sub' from claims")
return "", err
}
return userID, nil
}