uniworx/oauth2-mock-server
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ignore empty auth cookie

Browse Source
This commit is contained in:
David Mosbach 2024-03-03 21:34:56 +00:00
parent 8c0cd0099c
commit 3d8f77861a
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/Server.hs
View File

@ -152,7 +152,7 @@ loginServer = decideLogin
| otherwise = throwError err401 { errBody = "Prompt not supported" } | otherwise = throwError err401 { errBody = "Prompt not supported" }
where where
responseType' = readMaybe @ResponseType responseType responseType' = readMaybe @ResponseType responseType
mCreds = mCookies >>= lookup "oa2_auth_cookie" . parseCookiesText . encodeUtf8 mCreds = mCookies >>= lookup "oa2_auth_cookie" . parseCookiesText . encodeUtf8 >>= \c -> if c == "\"\"" then Nothing else Just c
validOIDC :: Bool validOIDC :: Bool
validOIDC = let scopes' = map (read @(Scope' user)) $ words scopes validOIDC = let scopes' = map (read @(Scope' user)) $ words scopes
in (Left OpenID `elem` scopes') == (responseType' == Just IDToken) in (Left OpenID `elem` scopes') == (responseType' == Just IDToken)
@ -160,6 +160,7 @@ loginServer = decideLogin
handleSSO :: AuthHandler user Html handleSSO :: AuthHandler user Html
handleSSO = do -- TODO check openid scope handleSSO = do -- TODO check openid scope
liftIO $ putStrLn "login via SSO..." liftIO $ putStrLn "login via SSO..."
liftIO . putStrLn $ "creds: " ++ show mCreds
unless (read @ResponseType responseType == IDToken) $ throwError err500 { errBody = "Unsupported response type" } unless (read @ResponseType responseType == IDToken) $ throwError err500 { errBody = "Unsupported response type" }
unless (isJust mCreds) $ throwError err500 { errBody = "Missing oauth2 cookie" } unless (isJust mCreds) $ throwError err500 { errBody = "Missing oauth2 cookie" }
url' <- handleCreds @user @userData (fromJust mCreds) scopes client url mState mNonce url' <- handleCreds @user @userData (fromJust mCreds) scopes client url mState mNonce