60 lines
1.5 KiB
Go
60 lines
1.5 KiB
Go
package main
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/logger"
|
|
"github.com/oauth2-proxy/oauth2-proxy/v7/pkg/requests"
|
|
)
|
|
|
|
const (
|
|
picsSignOutAllDevicesPath = "/sign_out_all_sessions"
|
|
)
|
|
|
|
func PicsSignOutAllSessions(backendLogoutAllSessionsURL string, introspectClaims string, accessToken string) (resp requests.Result, err error) {
|
|
userID, err := getUserID(introspectClaims)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("error getting userID from instrospect claims: %v", err)
|
|
}
|
|
|
|
backendLogoutURL := strings.ReplaceAll(backendLogoutAllSessionsURL, "{user_id}", userID)
|
|
resp = requests.New(backendLogoutURL).
|
|
WithMethod("POST").
|
|
SetHeader("Authorization", "Bearer "+accessToken).
|
|
SetHeader("API-Version", "1").
|
|
SetHeader("Accept", "application/json").
|
|
Do()
|
|
|
|
if resp.Error() != nil {
|
|
return nil, fmt.Errorf("error logging out from IAM: %v", err)
|
|
}
|
|
|
|
return resp, err
|
|
}
|
|
|
|
func getUserID(introspectClaims string) (string, error) {
|
|
decodedClaims, err := base64.StdEncoding.DecodeString(introspectClaims)
|
|
if err != nil {
|
|
logger.Errorf("error decoding claims: %v", err)
|
|
return "", err
|
|
}
|
|
|
|
var claims map[string]interface{}
|
|
err = json.Unmarshal(decodedClaims, &claims)
|
|
if err != nil {
|
|
logger.Errorf("error unmarshalling claims: %v", err)
|
|
return "", err
|
|
}
|
|
|
|
userID, ok := claims["sub"].(string)
|
|
if !ok {
|
|
logger.Errorf("error extracting 'sub' from claims")
|
|
return "", err
|
|
}
|
|
|
|
return userID, nil
|
|
}
|