6 Commits
Author SHA1 Message Date
janishutz e6b8422a1e fix: function pointer removed
Apparently go doesn't support those
2026-09-28 11:39:39 +02:00
janishutz 6cb582a762 chore: short docs on middleware 2026-09-28 11:24:35 +02:00
janishutz e241d90f42 feat: add option to add middleware for check endpoint 2026-09-28 11:23:45 +02:00
janishutz 59f635f01e fix: logout redirects 2026-09-28 06:49:10 +02:00
janishutz d9ca3abb6c fix!: actually publish the right code 2026-09-22 17:28:18 +02:00
janishutz bc4abcf5e3 fix!: user func assignment, defaultRedirect store 2026-09-22 17:24:32 +02:00
2 changed files with 30 additions and 5 deletions

No files matched your search

+9
View File
@@ -128,6 +128,15 @@ func logoutHandler(c *gin.Context) {
session := sessions.Default(c) session := sessions.Default(c)
session.Clear() session.Clear()
session.Save() session.Save()
redir := ""
if c.Query("returnTo") != "" {
redir = c.Query("returnTo")
}
if redir != "" {
c.Redirect(307, redir)
} else {
c.Redirect(307, defaultRedirect)
}
} }
// Ensure that a user is currently logged in. // Ensure that a user is currently logged in.
+21 -5
View File
@@ -20,18 +20,30 @@ func createRandomString(n int) (string, error) {
return base64.URLEncoding.EncodeToString(s), nil return base64.URLEncoding.EncodeToString(s), nil
} }
type UserFunc func(userid string, name string, email string)
var ( var (
config oauth2.Config config oauth2.Config
userFunc func(userid string, name string, email string) userFunc UserFunc
verifier oidc.IDTokenVerifier verifier oidc.IDTokenVerifier
defaultRedirect string defaultRedirect string
) )
// Configure and set up the login SDK. // Wraps the normal configure function, but also gives you access to change the User Function, which is called upon login.
func Configure(r *gin.Engine, app_url string, default_redirect string, stubs_on_unconfigured bool) { // It is used to create or update a user.
// The check middleware may be nil, in which case a default is used. Otherwise should be a valid gin middleware, calling c.Next() if okay to proceed.
func ConfigureFull(r *gin.Engine, app_url string, default_redirect string, user_function UserFunc, stubs_on_unconfigured bool, check_middleware func(c *gin.Context)) {
userFunc = user_function
Configure(r, app_url, default_redirect, stubs_on_unconfigured, check_middleware)
}
// Configure and set up the login SDK
// The check middleware may be nil, in which case a default is used. Otherwise should be a valid gin middleware, calling c.Next() if okay to proceed.
func Configure(r *gin.Engine, app_url string, default_redirect string, stubs_on_unconfigured bool, check_middleware func(c *gin.Context)) {
issuer := os.Getenv("OIDC_ISSUER") issuer := os.Getenv("OIDC_ISSUER")
clientID := os.Getenv("OIDC_CLIENT_ID") clientID := os.Getenv("OIDC_CLIENT_ID")
clientSecret := os.Getenv("OIDC_CLIENT_SECRET") clientSecret := os.Getenv("OIDC_CLIENT_SECRET")
defaultRedirect = default_redirect
if issuer == "" || clientID == "" || clientSecret == "" { if issuer == "" || clientID == "" || clientSecret == "" {
if stubs_on_unconfigured { if stubs_on_unconfigured {
@@ -45,7 +57,6 @@ func Configure(r *gin.Engine, app_url string, default_redirect string, stubs_on_
provider, err := oidc.NewProvider(context.Background(), issuer) provider, err := oidc.NewProvider(context.Background(), issuer)
verifier = *provider.Verifier(&oidc.Config{ClientID: clientID}) verifier = *provider.Verifier(&oidc.Config{ClientID: clientID})
defaultRedirect = default_redirect
if err != nil { if err != nil {
log.Fatal("[JHID] Provider resolution failed with error", err) log.Fatal("[JHID] Provider resolution failed with error", err)
@@ -61,7 +72,12 @@ func Configure(r *gin.Engine, app_url string, default_redirect string, stubs_on_
r.GET("/auth/v2/login", loginHandler) r.GET("/auth/v2/login", loginHandler)
r.GET("/auth/v2/verify", callbackHandler) r.GET("/auth/v2/verify", callbackHandler)
r.GET("/auth/v2/check", EnsureLogin(false), func(ctx *gin.Context) { ctx.JSON(200, gin.H{"success": "true"}) }) check_finalizer := func(ctx *gin.Context) { ctx.JSON(200, gin.H{"success": "true"}) }
if check_middleware == nil {
r.GET("/auth/v2/check", EnsureLogin(false), check_finalizer)
} else {
r.GET("/auth/v2/check", EnsureLogin(false), check_middleware, check_finalizer)
}
r.GET("/auth/v2/logout", logoutHandler) r.GET("/auth/v2/logout", logoutHandler)
log.Println("[JHID] Configured successfully") log.Println("[JHID] Configured successfully")