https://github.com/linka-cloud/oidc-handlers
https://github.com/linka-cloud/oidc-handlers
Last synced: 3 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/linka-cloud/oidc-handlers
- Owner: linka-cloud
- License: apache-2.0
- Created: 2021-09-08T10:24:34.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-01-17T14:12:47.000Z (over 1 year ago)
- Last Synced: 2024-12-30T07:20:25.843Z (5 months ago)
- Language: Go
- Size: 153 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# OIDC Http Handlers
A set of handlers to easily implements OIDC auth in applications.
### Getting Started
A [docker-compose.yml](docker-compose.yml) is available for testing:
```bash
docker-compose up -d
```
[Example App](example-test/example.go):
```go
package main
import (
"context"
"encoding/json"
"net/http"
"time"
"github.com/sirupsen/logrus"
oidch "go.linka.cloud/oidc-handlers"
)
func main() {
ctx, cancel := context.WithCancel(context.Background())
defer cancel()
config := oidch.Config{
IssuerURL: "http://localhost:5556",
ClientID: "oidc",
ClientSecret: "0TJ3992YlriTfyuTgcO81L8b6eZWlWwKC2Gqij5nR44",
OauthCallback: "http://example.localhost:8888/auth/callback",
}
devCtx, cancel := context.WithTimeout(ctx, 30 * time.Second)
defer cancel()
// Perform single device auth flow
if err := device(devCtx, config); err != nil {
logrus.Fatal(err)
}
// Start web app
if err := web(ctx, config); err != nil {
logrus.Fatal(err)
}
}
func device(ctx context.Context, config oidch.Config) error {
dh, err := config.DeviceHandler(ctx)
if err != nil {
return err
}
v, err := dh.Exchange(ctx)
if err != nil {
return err
}
logrus.Infof("Please visit %s to authenticate", v.URI())
if _, _, err := v.Verify(ctx); err != nil {
return err
}
logrus.Infof("Device authentication succeed")
return nil
}
func web(ctx context.Context, config oidch.Config) error {
oidc, err := config.WebHandler(ctx)
if err != nil {
return err
}
http.HandleFunc("/auth", oidc.RedirectHandler)
http.HandleFunc("/auth/callback", oidc.CallbackHandler)
http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
if _, err := oidc.Refresh(w, r); err != nil {
logrus.Error(err)
oidc.SetRedirectCookie(w, "/")
http.Redirect(w, r, "/auth", http.StatusSeeOther)
return
}
c, ok := oidch.ClaimsFromContext(r.Context())
if !ok {
http.Error(w, "no claims found", http.StatusInternalServerError)
return
}
json.NewEncoder(w).Encode(c)
})
lm := func (next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
logrus.WithFields(logrus.Fields{"path": r.URL.Path, "method": r.Method, "remote": r.RemoteAddr}).Info("new request")
next.ServeHTTP(w, r)
})
}
logrus.Info("Starting web server at http://example.localhost:8888")
return http.ListenAndServe(":8888", lm(http.DefaultServeMux))
}
```
Application is available at http://example.localhost:8888
**Email**: [email protected]
**Password**: password