a63597fc03
Add an OIDC client application to be deployed as a container for Kubernetes authentication. This application will be packaged into an RPM and automatically uploaded on controller-0 unlock. Story: 2006711 Task: 38166 Change-Id: I25c2b5ee7063d77722002df09afcc7d6725ebe8c Signed-off-by: Teresa Ho <teresa.ho@windriver.com>
79 lines
2.1 KiB
Go
79 lines
2.1 KiB
Go
// Initial file was taken from https://github.com/dexidp/dex/tree/master/cmd/example-app 2019
|
|
//
|
|
// Copyright (c) 2020 Wind River Systems, Inc.
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
//
|
|
package main
|
|
|
|
import (
|
|
"html/template"
|
|
"log"
|
|
"net/http"
|
|
)
|
|
|
|
type tokenTmplData struct {
|
|
IDToken string
|
|
AccessToken string
|
|
RefreshToken string
|
|
RedirectURL string
|
|
Claims string
|
|
}
|
|
|
|
var tokenTmpl = template.Must(template.New("token.html").Parse(`<html>
|
|
<head>
|
|
<style>
|
|
/* make pre wrap */
|
|
pre {
|
|
white-space: pre-wrap; /* css-3 */
|
|
white-space: -moz-pre-wrap; /* Mozilla, since 1999 */
|
|
white-space: -pre-wrap; /* Opera 4-6 */
|
|
white-space: -o-pre-wrap; /* Opera 7 */
|
|
word-wrap: break-word; /* Internet Explorer 5.5+ */
|
|
}
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<p> ID Token: <pre><code>{{ .IDToken }}</code></pre></p>
|
|
<p> Access Token: <pre><code>{{ .AccessToken }}</code></pre></p>
|
|
<p> Claims: <pre><code>{{ .Claims }}</code></pre></p>
|
|
{{ if .RefreshToken }}
|
|
<p> Refresh Token: <pre><code>{{ .RefreshToken }}</code></pre></p>
|
|
<form action="{{ .RedirectURL }}" method="post">
|
|
<input type="hidden" name="refresh_token" value="{{ .RefreshToken }}">
|
|
<input type="submit" value="Redeem refresh token">
|
|
</form>
|
|
{{ end }}
|
|
</body>
|
|
</html>
|
|
`))
|
|
|
|
func renderToken(w http.ResponseWriter, redirectURL, idToken, accessToken, refreshToken, claims string) {
|
|
renderTemplate(w, tokenTmpl, tokenTmplData{
|
|
IDToken: idToken,
|
|
AccessToken: accessToken,
|
|
RefreshToken: refreshToken,
|
|
RedirectURL: redirectURL,
|
|
Claims: claims,
|
|
})
|
|
}
|
|
|
|
func renderTemplate(w http.ResponseWriter, tmpl *template.Template, data interface{}) {
|
|
err := tmpl.Execute(w, data)
|
|
if err == nil {
|
|
return
|
|
}
|
|
|
|
switch err := err.(type) {
|
|
case *template.Error:
|
|
// An ExecError guarantees that Execute has not written to the underlying reader.
|
|
log.Printf("Error rendering template %s: %s", tmpl.Name(), err)
|
|
|
|
// TODO(ericchiang): replace with better internal server error.
|
|
http.Error(w, "Internal server error", http.StatusInternalServerError)
|
|
default:
|
|
// An error with the underlying write, such as the connection being
|
|
// dropped. Ignore for now.
|
|
}
|
|
}
|