zydronium/rdpgw
1
0
Fork 0
mirror of https://github.com/bolkedebruin/rdpgw.git synced 2025-08-17 14:03:50 +02:00
Code Issues Projects Releases Packages Wiki Activity

Verify access key as part of PAA verification

Browse source
This commit is contained in:
Bolke de Bruin 2020-08-20 14:46:01 +02:00
parent 93c558786f
commit db00ce7be0
2 changed files with 15 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
main.go
View file

@ -41,8 +41,7 @@ func main() {
security.UserSigningKey = []byte(conf.Security.UserTokenSigningKey) security.UserSigningKey = []byte(conf.Security.UserTokenSigningKey)
// set oidc config // set oidc config
ctx := context.Background() provider, err := oidc.NewProvider(context.Background(), conf.OpenId.ProviderUrl)
provider, err := oidc.NewProvider(ctx, conf.OpenId.ProviderUrl)
if err != nil { if err != nil {
log.Fatalf("Cannot get oidc provider: %s", err) log.Fatalf("Cannot get oidc provider: %s", err)
} }
@ -58,6 +57,8 @@ func main() {
Endpoint: provider.Endpoint(), Endpoint: provider.Endpoint(),
Scopes: []string{oidc.ScopeOpenID, "profile", "email"}, Scopes: []string{oidc.ScopeOpenID, "profile", "email"},
} }
security.OIDCProvider = provider
security.Oauth2Config = oauthConfig
api := &api.Config{ api := &api.Config{
GatewayAddress: conf.Server.GatewayAddress, GatewayAddress: conf.Server.GatewayAddress,

12
security/jwt.go
View file

@ -6,8 +6,10 @@ import (
"fmt" "fmt"
"github.com/bolkedebruin/rdpgw/common" "github.com/bolkedebruin/rdpgw/common"
"github.com/bolkedebruin/rdpgw/protocol" "github.com/bolkedebruin/rdpgw/protocol"
"github.com/coreos/go-oidc/v3/oidc"
"github.com/square/go-jose/v3" "github.com/square/go-jose/v3"
"github.com/square/go-jose/v3/jwt" "github.com/square/go-jose/v3/jwt"
"golang.org/x/oauth2"
"log" "log"
"time" "time"
) )
@ -17,6 +19,8 @@ var (
EncryptionKey []byte EncryptionKey []byte
UserSigningKey []byte UserSigningKey []byte
UserEncryptionKey []byte UserEncryptionKey []byte
OIDCProvider *oidc.Provider
Oauth2Config oauth2.Config
) )
var ExpiryTime time.Duration = 5 var ExpiryTime time.Duration = 5
@ -58,6 +62,14 @@ func VerifyPAAToken(ctx context.Context, tokenString string) (bool, error) {
return false, err return false, err
} }
// validate the access token
tokenSource := Oauth2Config.TokenSource(ctx, &oauth2.Token{AccessToken: custom.AccessToken})
_, err = OIDCProvider.UserInfo(ctx, tokenSource)
if err != nil {
log.Printf("Cannot get user info for access token: %s", err)
return false, err
}
s := getSessionInfo(ctx) s := getSessionInfo(ctx)
s.RemoteServer = custom.RemoteServer s.RemoteServer = custom.RemoteServer