e64e6fa · typeable/oauth2-proxy

env_options.go+1−1

compare with master

unifiedsplit

@@ -40,7 +40,7 @@ func (cfg EnvOptions) LoadEnvForStruct(options interface{}) {

40 envName := field.Tag.Get("env")

41 cfgName := field.Tag.Get("cfg")

42 if cfgName == "" && flagName != "" {

43− cfgName = strings.Replace(flagName, "-", "_", -1)

43+ cfgName = strings.ReplaceAll(flagName, "-", "_")

44 }

45 if envName == "" || cfgName == "" {

46 // resolvable fields must have the `env` and `cfg` struct tag

oauthproxy.go+1−1

@@ -119,7 +119,7 @@ func (u *UpstreamProxy) ServeHTTP(w http.ResponseWriter, r *http.Request) {

119 r.Header.Set("GAP-Auth", w.Header().Get("GAP-Auth"))

120 u.auth.SignRequest(r)

121 }

122− if u.wsHandler != nil && strings.ToLower(r.Header.Get("Connection")) == "upgrade" && r.Header.Get("Upgrade") == "websocket" {

122+ if u.wsHandler != nil && strings.EqualFold(r.Header.Get("Connection"), "upgrade") && r.Header.Get("Upgrade") == "websocket" {

123 u.wsHandler.ServeHTTP(w, r)

124 } else {

125 u.handler.ServeHTTP(w, r)

pkg/sessions/cookie/session_store.go+5−5

@@ -136,18 +136,18 @@ func splitCookie(c *http.Cookie) []*http.Cookie {

136 valueBytes := []byte(c.Value)

137 count := 0

138 for len(valueBytes) > 0 {

139− new := copyCookie(c)

139+ newCookie := copyCookie(c)

140− new.Name = fmt.Sprintf("%s_%d", c.Name, count)

140+ newCookie.Name = fmt.Sprintf("%s_%d", c.Name, count)

141 count++

142 if len(valueBytes) < maxCookieLength {

143− new.Value = string(valueBytes)

143+ newCookie.Value = string(valueBytes)

144 valueBytes = []byte{}

145 } else {

146 newValue := valueBytes[:maxCookieLength]

147 valueBytes = valueBytes[maxCookieLength:]

148− new.Value = string(newValue)

148+ newCookie.Value = string(newValue)

149 }

150− cookies = append(cookies, new)

150+ cookies = append(cookies, newCookie)

151 }

152 return cookies

153}

providers/google.go+4−3

@@ -195,9 +195,10 @@ func userInGroup(service *admin.Service, groups []string, email string) bool {

195 r, err := req.Do()

196 if err != nil {

197 err, ok := err.(*googleapi.Error)

198+ switch {

198− if ok && err.Code == 404 {

199+ case ok && err.Code == 404:

199 logger.Printf("error checking membership in group %s: group does not exist", group)

200 logger.Printf("error checking membership in group %s: group does not exist", group)

200− } else if ok && err.Code == 400 {

201+ case ok && err.Code == 400:

201 // It is possible for Members.HasMember to return false even if the email is a group member.

202 // It is possible for Members.HasMember to return false even if the email is a group member.

202 // One case that can cause this is if the user email is from a different domain than the group,

203 // One case that can cause this is if the user email is from a different domain than the group,

203 // e.g. "member@otherdomain.com" in the group "group@mydomain.com" will result in a 400 error

204 // e.g. "member@otherdomain.com" in the group "group@mydomain.com" will result in a 400 error

@@ -215,7 +216,7 @@ func userInGroup(service *admin.Service, groups []string, email string) bool {

215 if r.Status == "ACTIVE" {

216 if r.Status == "ACTIVE" {

216 return true

217 return true

217 }

218 }

218− } else {

219+ default:

219 logger.Printf("error checking group membership: %v", err)

220 logger.Printf("error checking group membership: %v", err)

220 }

221 }

221 continue

222 continue