pangolin_mirror/badger
1
0
Fork 0
mirror of https://github.com/fosrl/badger.git synced 2026-09-01 03:31:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

strip access token query param if persistent token

Browse Source
This commit is contained in:
miloschwartz
2026-07-17 16:51:19 -04:00
parent df9ce0316a
commit a064f7ac8e
2 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
main.go
View File

@@ -158,6 +158,7 @@ func (p *Badger) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
cookies := p.extractCookies(req)
queryValues := req.URL.Query()
hadAccessTokenQuery := p.accessTokenQueryParam != "" && queryValues.Get(p.accessTokenQueryParam) != ""
if sessionRequestValue := queryValues.Get(p.resourceSessionRequestParam); sessionRequestValue != "" {
body := ExchangeSessionBody{
@@ -261,6 +262,7 @@ func (p *Badger) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
for _, setCookie := range resp.Header["Set-Cookie"] {
rw.Header().Add("Set-Cookie", setCookie)
}
receivedSetCookie := len(resp.Header["Set-Cookie"]) > 0
if resp.StatusCode != http.StatusOK {
http.Error(rw, "Internal Server Error", http.StatusInternalServerError)
@@ -307,6 +309,18 @@ func (p *Badger) ServeHTTP(rw http.ResponseWriter, req *http.Request) {
}
if result.Data.Valid {
if hadAccessTokenQuery && receivedSetCookie && req.Method == http.MethodGet {
cleanQuery := req.URL.Query()
cleanQuery.Del(p.accessTokenQueryParam)
cleaned := cleanQuery.Encode()
cleanURL := fmt.Sprintf("%s://%s%s", p.getScheme(req), req.Host, req.URL.Path)
if cleaned != "" {
cleanURL = fmt.Sprintf("%s?%s", cleanURL, cleaned)
}
fmt.Println("Badger: Access token session created, redirecting to", cleanURL)
http.Redirect(rw, req, cleanURL, http.StatusFound)
return
}
if result.Data.UserId != nil {
req.Header.Add("Remote-User-Id", *result.Data.UserId)

2
version/version.go
View File

@@ -1,3 +1,3 @@
package version
const Version = "1.4.1"
const Version = "1.5.0"