YunoHost/SSOwat
1
0
Fork 0
mirror of https://github.com/YunoHost/SSOwat.git synced 2024-09-03 20:06:27 +02:00
Code Issues Projects Releases Packages Wiki Activity

[fix] Use 'cache' shared table to store CDA keys and avoid infinite redirections

Browse source
This commit is contained in:
kload 2015-05-04 19:29:55 +02:00
parent 89c813abe7
commit 294b1d6058
2 changed files with 7 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
access.lua
View file

@ -43,12 +43,13 @@ if ngx.var.host ~= conf["portal_domain"] and ngx.var.request_method == "GET" the
if uri_args[conf.login_arg] then if uri_args[conf.login_arg] then
cda_key = uri_args[conf.login_arg] cda_key = uri_args[conf.login_arg]
-- Use the `login` shared table where a username is associated with -- Use the `cache` shared table where a username is associated with
-- a CDA key -- a CDA key
if login[cda_key] then user = cache:get(cda_key)
hlp.set_auth_cookie(login[cda_key], ngx.var.host) if user then
ngx.log(ngx.NOTICE, "Cross-domain authentication: "..login[cda_key].." connected on "..ngx.var.host) hlp.set_auth_cookie(user, ngx.var.host)
login[cda_key] = nil ngx.log(ngx.NOTICE, "Cross-domain authentication: "..user.." connected on "..ngx.var.host)
cache:delete(cda_key)
end end
uri_args[conf.login_arg] = nil uri_args[conf.login_arg] = nil
@ -99,7 +100,7 @@ then
if not string.match(back_url, "^http[s]?://"..ngx.var.host.."/") if not string.match(back_url, "^http[s]?://"..ngx.var.host.."/")
and not string.match(back_url, ".*"..conf.login_arg.."=%d+$") then and not string.match(back_url, ".*"..conf.login_arg.."=%d+$") then
cda_key = random_string() cda_key = random_string()
login[cda_key] = ngx.var.cookie_SSOwAuthUser cache:set(cda_key, ngx.var.cookie_SSOwAuthUser, 10)
if string.match(back_url, ".*?.*") then if string.match(back_url, ".*?.*") then
back_url = back_url.."&" back_url = back_url.."&"
else else

2
init.lua
View file

@ -24,8 +24,6 @@ socket = require "socket"
-- Persistent shared table -- Persistent shared table
flashs = {} flashs = {}
login = {}
logout = {}
i18n = {} i18n = {}
-- Efficient function to get a random string -- Efficient function to get a random string