pangolin_mirror/newt
1
0
Fork 0
mirror of https://github.com/fosrl/newt.git synced 2026-10-05 20:29:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Handle browser gateway push pam auth

Browse Source 
Former-commit-id: 1ba9a419cb
This commit is contained in:
Owen
2026-06-04 11:28:20 -07:00
parent e5bf31d118
commit 8eddb908e0
7 changed files with 91 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
browsergateway/ssh_native.go
+2 -2
View File
@@ -17,7 +17,7 @@ import (
// The auth frame from the browser must be a JSON sshClientMsg with type="auth"
// carrying the same password/privateKey fields used by the proxy SSH path.
// The target username is passed in from the HTTP layer (query param).
func serveNativeSSHSession(ctx context.Context, ws *websocket.Conn, username string) error {
func serveNativeSSHSession(ctx context.Context, ws *websocket.Conn, username string, creds *nativessh.CredentialStore) error {
// Read the auth frame.
_, authBytes, err := ws.Read(ctx)
if err != nil {
@@ -29,7 +29,7 @@ func serveNativeSSHSession(ctx context.Context, ws *websocket.Conn, username str
}
// Authenticate using host authorized_keys or PAM password.
if err := nativessh.Authenticate(username, authMsg.Password, authMsg.PrivateKey); err != nil {
if err := nativessh.AuthenticateWithCertificate(creds, username, authMsg.Password, authMsg.PrivateKey, authMsg.Certificate); err != nil {
sendSSHError(ctx, ws, "Authentication failed")
return fmt.Errorf("auth for user %q: %w", username, err)
}