3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-08-06 10:21:05 +02:00
Code Issues Projects Releases Packages Wiki Activity

authorize: show plain text error page for traefik and nginx (#3477)

Browse source
This commit is contained in:
Caleb Doxsey 2022-07-13 08:36:18 -06:00 • committed by GitHub
parent d9274f0d19
commit ca8db7b619
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 32 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

13
authorize/check_response.go
View file

@ -93,6 +93,11 @@ func (a *Authorize) deniedResponse(
in *envoy_service_auth_v3.CheckRequest, in *envoy_service_auth_v3.CheckRequest,
code int32, reason string, headers map[string]string, code int32, reason string, headers map[string]string,
) (*envoy_service_auth_v3.CheckResponse, error) { ) (*envoy_service_auth_v3.CheckResponse, error) {
respBody := []byte(reason)
respHeader := []*envoy_config_core_v3.HeaderValueOption{}
forwardAuthURL, _ := a.currentOptions.Load().GetForwardAuthURL()
if forwardAuthURL == nil {
// create a http response writer recorder // create a http response writer recorder
w := httptest.NewRecorder() w := httptest.NewRecorder()
r := getHTTPRequestFromCheckRequest(in) r := getHTTPRequestFromCheckRequest(in)
@ -112,13 +117,17 @@ func (a *Authorize) deniedResponse(
// transpose the go http response writer into a envoy response // transpose the go http response writer into a envoy response
resp := w.Result() resp := w.Result()
defer resp.Body.Close() defer resp.Body.Close()
respBody, err := io.ReadAll(resp.Body) var err error
respBody, err = io.ReadAll(resp.Body)
if err != nil { if err != nil {
log.Error(ctx).Err(err).Msg("error executing error template") log.Error(ctx).Err(err).Msg("error executing error template")
return nil, err return nil, err
} }
// convert go headers to envoy headers // convert go headers to envoy headers
respHeader := toEnvoyHeaders(resp.Header) respHeader = append(respHeader, toEnvoyHeaders(resp.Header)...)
} else {
respHeader = append(respHeader, mkHeader("Content-Type", "text/plain", false))
}
// add any additional headers // add any additional headers
for k, v := range headers { for k, v := range headers {