3 Commits

Author	SHA1	Message	Date
Clément Michaud	92d328926d	refactor(handlers): lower case error messages (#2289) ... * refactor(handlers): lower case error messages also refactor verifyAuth function to detect malicious activity both with session cookie and authorization header. * refacto(handlers): simplify error construction * fix(handlers): check prefix in authorization header to determine auth method * fix(handlers): determining the method should be done with headers instead of query arg * refacto(handlers): rollback changes of verifyAuth * don't lowercase log messages * Apply suggestions from code review Make sure logger errors are not lowercased. * fix: uppercase logger errors and remove unused param * Do not lowercase logger errors * Remove unused param targetURL * Rename url variable to not conflict with imported package Co-authored-by: Amir Zarrinkafsh <nightah@me.com>	2021-09-17 15:53:40 +10:00
James Elliott	b4e570358e	fix: include major in go.mod module directive (#2278) ... * build: include major in go.mod module directive * fix: xflags * revert: cobra changes * fix: mock doc	2021-08-11 11:16:46 +10:00
Amir Zarrinkafsh	e2ebdb7e41	fix: oidc issuer path and strip path middleware (#2272) ... * fix: oidc issuer path and strip path middleware This ensures the server.path requests append the base_url to the oidc well-known issuer information and adjusts server.path configuration to only strip the configured path instead of the first level entirely regardless of its content. * fix: only log the token error and general refactoring * refactor: factorize base_url functions * refactor(server): include all paths in startup logging * refactor: factorize * refactor: GetExternalRootURL -> ExternalRootURL Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>	2021-08-10 10:31:08 +10:00