Ajout du nonce à la requête de login #1

Merged
wpetit merged 1 commits from nonce into master 2023-03-02 15:23:12 +01:00
2 changed files with 4 additions and 1 deletions
Showing only changes of commit f9c919a2ac - Show all commits

View File

@ -37,15 +37,17 @@ func (c *Client) Login(w http.ResponseWriter, r *http.Request) {
}
state := uniuri.New()
nonce := uniuri.New()
sess.Set(SessionOIDCStateKey, state)
sess.Set(SessionOIDCNonceKey, nonce)
if err := sess.Save(w, r); err != nil {
panic(errors.Wrap(err, "could not save session"))
}
authCodeOptions := []oauth2.AuthCodeOption{}
authCodeOptions = append(authCodeOptions, oidc.Nonce(nonce))
authCodeURL := c.oauth2.AuthCodeURL(
state,
authCodeOptions...,

View File

@ -14,6 +14,7 @@ import (
const (
SessionIDTokenKey = "oidc-id-token"
SessionOIDCStateKey = "oidc-state"
SessionOIDCNonceKey = "oidc-nonce"
)
func init() {