mirror of
https://github.com/goauthentik/authentik
synced 2026-04-27 09:57:31 +02:00
2f70351c90
* packages/client-go: init Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> * format Signed-off-by: Jens Langhammer <jens@goauthentik.io> * remove mod/sum Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix translate Signed-off-by: Jens Langhammer <jens@goauthentik.io> * no go replace Signed-off-by: Jens Langhammer <jens@goauthentik.io> * update rust makefile with pwd Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> * fix build Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix docs Signed-off-by: Jens Langhammer <jens@goauthentik.io> * don't need a version ig? Signed-off-by: Jens Langhammer <jens@goauthentik.io> * exclude go client from cspell Signed-off-by: Jens Langhammer <jens@goauthentik.io> * fix main docker build Signed-off-by: Jens Langhammer <jens@goauthentik.io> --------- Signed-off-by: Marc 'risson' Schmitt <marc.schmitt@risson.space> Signed-off-by: Jens Langhammer <jens@goauthentik.io> Co-authored-by: Jens Langhammer <jens@goauthentik.io>
100 lines
3.7 KiB
Go
100 lines
3.7 KiB
Go
package application
|
|
|
|
import (
|
|
"net/http"
|
|
"net/http/httptest"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"goauthentik.io/internal/outpost/proxyv2/constants"
|
|
api "goauthentik.io/packages/client-go"
|
|
)
|
|
|
|
func TestRedirectToStart_Proxy(t *testing.T) {
|
|
a := newTestApplication()
|
|
a.proxyConfig.Mode = api.PROXYMODE_PROXY.Ptr()
|
|
a.proxyConfig.ExternalHost = "https://test.goauthentik.io"
|
|
req, _ := http.NewRequest("GET", "/foo/bar/baz", nil)
|
|
|
|
rr := httptest.NewRecorder()
|
|
a.redirectToStart(rr, req)
|
|
|
|
assert.Equal(t, http.StatusFound, rr.Code)
|
|
loc, _ := rr.Result().Location()
|
|
assert.Equal(t, "https://test.goauthentik.io/outpost.goauthentik.io/start?rd=https%3A%2F%2Ftest.goauthentik.io%2Ffoo%2Fbar%2Fbaz", loc.String())
|
|
|
|
s, _ := a.sessions.Get(req, a.SessionName())
|
|
assert.Equal(t, "https://test.goauthentik.io/foo/bar/baz", s.Values[constants.SessionRedirect])
|
|
}
|
|
|
|
func TestRedirectToStart_Proxy_EncodedSlash(t *testing.T) {
|
|
a := newTestApplication()
|
|
a.proxyConfig.Mode = api.PROXYMODE_PROXY.Ptr()
|
|
a.proxyConfig.ExternalHost = "https://test.goauthentik.io"
|
|
// %2F is a URL-encoded forward slash, used by apps like RabbitMQ in queue paths
|
|
req, _ := http.NewRequest("GET", "/api/queues/%2F/MYChannelCreated", nil)
|
|
|
|
rr := httptest.NewRecorder()
|
|
a.redirectToStart(rr, req)
|
|
|
|
assert.Equal(t, http.StatusFound, rr.Code)
|
|
loc, _ := rr.Result().Location()
|
|
assert.Contains(t, loc.String(), "%252F", "encoded slash %2F must be preserved in redirect URL")
|
|
|
|
s, _ := a.sessions.Get(req, a.SessionName())
|
|
assert.Contains(t, s.Values[constants.SessionRedirect].(string), "%2F", "encoded slash %2F must be preserved in session redirect")
|
|
}
|
|
|
|
func TestRedirectToStart_Forward(t *testing.T) {
|
|
a := newTestApplication()
|
|
a.proxyConfig.Mode = api.PROXYMODE_FORWARD_SINGLE.Ptr()
|
|
a.proxyConfig.ExternalHost = "https://test.goauthentik.io"
|
|
req, _ := http.NewRequest("GET", "/foo/bar/baz", nil)
|
|
|
|
rr := httptest.NewRecorder()
|
|
a.redirectToStart(rr, req)
|
|
|
|
assert.Equal(t, http.StatusFound, rr.Code)
|
|
loc, _ := rr.Result().Location()
|
|
assert.Equal(t, "https://test.goauthentik.io/outpost.goauthentik.io/start?rd=https%3A%2F%2Ftest.goauthentik.io%2Ffoo%2Fbar%2Fbaz", loc.String())
|
|
|
|
s, _ := a.sessions.Get(req, a.SessionName())
|
|
assert.Equal(t, "https://test.goauthentik.io/foo/bar/baz", s.Values[constants.SessionRedirect])
|
|
}
|
|
|
|
func TestRedirectToStart_Forward_Domain_Invalid(t *testing.T) {
|
|
a := newTestApplication()
|
|
a.proxyConfig.CookieDomain = new("foo")
|
|
a.proxyConfig.Mode = api.PROXYMODE_FORWARD_DOMAIN.Ptr()
|
|
a.proxyConfig.ExternalHost = "https://test.goauthentik.io"
|
|
req, _ := http.NewRequest("GET", "/foo/bar/baz", nil)
|
|
|
|
rr := httptest.NewRecorder()
|
|
a.redirectToStart(rr, req)
|
|
|
|
assert.Equal(t, http.StatusFound, rr.Code)
|
|
loc, _ := rr.Result().Location()
|
|
assert.Equal(t, "https://test.goauthentik.io/outpost.goauthentik.io/start?rd=https%3A%2F%2Ftest.goauthentik.io", loc.String())
|
|
|
|
s, _ := a.sessions.Get(req, a.SessionName())
|
|
assert.Equal(t, "https://test.goauthentik.io", s.Values[constants.SessionRedirect])
|
|
}
|
|
|
|
func TestRedirectToStart_Forward_Domain(t *testing.T) {
|
|
a := newTestApplication()
|
|
a.proxyConfig.CookieDomain = new("goauthentik.io")
|
|
a.proxyConfig.Mode = api.PROXYMODE_FORWARD_DOMAIN.Ptr()
|
|
a.proxyConfig.ExternalHost = "https://test.goauthentik.io"
|
|
req, _ := http.NewRequest("GET", "/foo/bar/baz", nil)
|
|
|
|
rr := httptest.NewRecorder()
|
|
a.redirectToStart(rr, req)
|
|
|
|
assert.Equal(t, http.StatusFound, rr.Code)
|
|
loc, _ := rr.Result().Location()
|
|
assert.Equal(t, "https://test.goauthentik.io/outpost.goauthentik.io/start?rd=https%3A%2F%2Ftest.goauthentik.io", loc.String())
|
|
|
|
s, _ := a.sessions.Get(req, a.SessionName())
|
|
assert.Equal(t, "https://test.goauthentik.io", s.Values[constants.SessionRedirect])
|
|
}
|