11699a8 · typeable/oauth2-proxy

git.iko.soy/typeable/oauth2-proxy

Add ValidateSession function to LoginGovProvder to include Auth Header (#1509)

* Add ValidateSession function to LoginGovProvder to include Auth Header * Update CHANGELOG for PR 1509 * Update logingov_test to include ValidationURL

commit11699a822aad4226c65c5f506f4c0b299e25d291 authorPreston Sheldon <pksiv@hotmail.com> dateFri 4 Feb 2022, 04:22 (5 years ago) parent88709d8

3 files changed+8−2

compare with master

unifiedsplit

CHANGELOG.md+1 providers/logingov.go+6−1 providers/logingov_test.go+1−1

CHANGELOG.md+1

@@ -10,6 +10,7 @@

1010

1111- [#1489](https://github.com/oauth2-proxy/oauth2-proxy/pull/1489) Fix Docker Buildx push to include build version (@JoelSpeed)

1212- [#1477](https://github.com/oauth2-proxy/oauth2-proxy/pull/1477) Remove provider documentation for `Microsoft Azure AD` (@omBratteng)

13+- [#1509](https://github.com/oauth2-proxy/oauth2-proxy/pull/1509) Update LoginGovProvider ValidateSession to pass access_token in Header (@pksheldon4)

1314

1415# V7.2.1

1516

providers/logingov.go+6−1

@@ -84,7 +84,7 @@ func NewLoginGovProvider(p *ProviderData) *LoginGovProvider {

8484 loginURL: loginGovDefaultLoginURL,

8585 redeemURL: loginGovDefaultRedeemURL,

8686 profileURL: loginGovDefaultProfileURL,

87− validateURL: nil,

87+ validateURL: loginGovDefaultProfileURL,

8888 scope: loginGovDefaultScope,

8989 })

9090 return &LoginGovProvider{

@@ -237,3 +237,8 @@ func (p *LoginGovProvider) GetLoginURL(redirectURI, state, _ string) string {

237237 a := makeLoginURL(p.ProviderData, redirectURI, state, extraParams)

238238 return a.String()

239239}

240+

241+// ValidateSession validates the AccessToken

242+func (p *LoginGovProvider) ValidateSession(ctx context.Context, s *sessions.SessionState) bool {

243+ return validateToken(ctx, p, s.AccessToken, makeOIDCHeader(s.AccessToken))

244+}

providers/logingov_test.go+1−1

@@ -75,7 +75,7 @@ func TestNewLoginGovProvider(t *testing.T) {

7575 g.Expect(providerData.LoginURL.String()).To(Equal("https://secure.login.gov/openid_connect/authorize"))

7676 g.Expect(providerData.RedeemURL.String()).To(Equal("https://secure.login.gov/api/openid_connect/token"))

7777 g.Expect(providerData.ProfileURL.String()).To(Equal("https://secure.login.gov/api/openid_connect/userinfo"))

78− g.Expect(providerData.ValidateURL.String()).To(Equal(""))

78+ g.Expect(providerData.ValidateURL.String()).To(Equal("https://secure.login.gov/api/openid_connect/userinfo"))

7979 g.Expect(providerData.Scope).To(Equal("email openid"))

8080}

8181