authenticate: redirect / to /.pomerium/ (#2770)

This commit is contained in:
Caleb Doxsey 2021-11-18 08:49:23 -07:00 committed by GitHub
parent d90d4caf1a
commit a5034aabae
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 2 deletions

View file

@ -67,6 +67,9 @@ func (a *Authenticate) Mount(r *mux.Router) {
)(h)
})
// redirect / to /.pomerium/
r.Path("/").Handler(http.RedirectHandler("/.pomerium/", http.StatusFound))
r.Path("/robots.txt").HandlerFunc(a.RobotsTxt).Methods(http.MethodGet)
// Identity Provider (IdP) endpoints
r.Path("/oauth2/callback").Handler(httputil.HandlerFunc(a.OAuthCallback)).Methods(http.MethodGet)

View file

@ -110,7 +110,7 @@ func (b *Builder) buildPomeriumHTTPRoutes(options *config.Options, domain string
return nil, err
}
if config.IsAuthenticate(options.Services) && hostMatchesDomain(authenticateURL, domain) {
r, err := b.buildControlPlanePathRoute(options.AuthenticateCallbackPath, false)
r, err := b.buildControlPlanePrefixRoute("/", false)
if err != nil {
return nil, err
}

View file

@ -96,7 +96,7 @@ func Test_buildPomeriumHTTPRoutes(t *testing.T) {
`+routeString("path", "/.well-known/pomerium", false)+`,
`+routeString("prefix", "/.well-known/pomerium/", false)+`,
`+routeString("path", "/robots.txt", false)+`,
`+routeString("path", "/oauth2/callback", false)+`
`+routeString("prefix", "/", false)+`
]`, routes)
})
t.Run("proxy fronting authenticate", func(t *testing.T) {