3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-08-04 09:19:39 +02:00
Code Issues Projects Releases Packages Wiki Activity

authorize: fix domain check bug, rewrite url for forward auth, add dev script

Browse source
This commit is contained in:
Caleb Doxsey 2020-04-20 13:42:03 -06:00
parent 170f7f07d3
commit ea1c6efc24
5 changed files with 90 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

23
authorize/evaluator/opa/policy/authz_test.rego
View file

@ -26,6 +26,29 @@ test_email_allowed {
}
}
test_example {
user := io.jwt.encode_sign(jwt_header, {
"aud": ["example.com"],
"email": "joe@example.com"
}, signing_key)
not allow with data.route_policies as [
{
"source": "http://example.com",
"path": "/a",
"allowed_domains": ["example.com"]
},
{
"source": "http://example.com",
"path": "/b",
"allowed_users": ["noone@pomerium.com"]
},
] with data.signing_key as signing_key with data.shared_key as shared_key with input as {
"url": "http://example.com/b",
"host": "example.com",
"user": user
}
}
test_email_denied {
user := io.jwt.encode_sign(jwt_header, {
"aud": ["example.com"],