mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-29 14:39:40 +02:00
9678e6a231
Implement the pkg/ssh.AuthInterface. Add logic for converting from the ssh stream state to an evaluator request, and for interpreting the results of policy evaluation. Refactor some of the existing authorize logic to make it easier to reuse.
42 lines
1.2 KiB
Go
42 lines
1.2 KiB
Go
// Package authenticateflow implements the core authentication flow. This
|
|
// includes creating and parsing sign-in redirect URLs, storing and retrieving
|
|
// session data, and handling authentication callback URLs.
|
|
package authenticateflow
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
oteltrace "go.opentelemetry.io/otel/trace"
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/stats"
|
|
"google.golang.org/grpc/status"
|
|
|
|
"github.com/pomerium/pomerium/pkg/grpc"
|
|
"github.com/pomerium/pomerium/pkg/telemetry/trace"
|
|
)
|
|
|
|
// timeNow is time.Now but pulled out as a variable for tests.
|
|
var timeNow = time.Now
|
|
|
|
var outboundGRPCConnection = new(grpc.CachedOutboundGRPClientConn)
|
|
|
|
var outboundDatabrokerTraceClientOpts = []trace.ClientStatsHandlerOption{
|
|
trace.WithStatsInterceptor(ignoreNotFoundErrors),
|
|
}
|
|
|
|
func ignoreNotFoundErrors(ctx context.Context, rs stats.RPCStats) stats.RPCStats {
|
|
if end, ok := rs.(*stats.End); ok && end.IsClient() {
|
|
if status.Code(end.Error) == codes.NotFound {
|
|
oteltrace.SpanFromContext(ctx).AddEvent("status code: NotFound")
|
|
return &stats.End{
|
|
Client: end.Client,
|
|
BeginTime: end.BeginTime,
|
|
EndTime: end.EndTime,
|
|
Trailer: end.Trailer,
|
|
Error: nil,
|
|
}
|
|
}
|
|
}
|
|
return rs
|
|
}
|