mirror of
https://github.com/0rangebananaspy/authelia.git
synced 2024-09-14 22:47:21 +07:00
92d328926d
* refactor(handlers): lower case error messages also refactor verifyAuth function to detect malicious activity both with session cookie and authorization header. * refacto(handlers): simplify error construction * fix(handlers): check prefix in authorization header to determine auth method * fix(handlers): determining the method should be done with headers instead of query arg * refacto(handlers): rollback changes of verifyAuth * don't lowercase log messages * Apply suggestions from code review Make sure logger errors are not lowercased. * fix: uppercase logger errors and remove unused param * Do not lowercase logger errors * Remove unused param targetURL * Rename url variable to not conflict with imported package Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
35 lines
1.2 KiB
Go
35 lines
1.2 KiB
Go
package handlers
|
|
|
|
import (
|
|
"github.com/authelia/authelia/v4/internal/authentication"
|
|
"github.com/authelia/authelia/v4/internal/middlewares"
|
|
)
|
|
|
|
// ConfigurationBody the content returned by the configuration endpoint.
|
|
type ConfigurationBody struct {
|
|
AvailableMethods MethodList `json:"available_methods"`
|
|
SecondFactorEnabled bool `json:"second_factor_enabled"` // whether second factor is enabled or not.
|
|
TOTPPeriod int `json:"totp_period"`
|
|
}
|
|
|
|
// ConfigurationGet get the configuration accessible to authenticated users.
|
|
func ConfigurationGet(ctx *middlewares.AutheliaCtx) {
|
|
body := ConfigurationBody{}
|
|
body.AvailableMethods = MethodList{authentication.TOTP, authentication.U2F}
|
|
body.TOTPPeriod = ctx.Configuration.TOTP.Period
|
|
|
|
if ctx.Configuration.DuoAPI != nil {
|
|
body.AvailableMethods = append(body.AvailableMethods, authentication.Push)
|
|
}
|
|
|
|
body.SecondFactorEnabled = ctx.Providers.Authorizer.IsSecondFactorEnabled()
|
|
|
|
ctx.Logger.Tracef("Second factor enabled: %v", body.SecondFactorEnabled)
|
|
ctx.Logger.Tracef("Available methods are %s", body.AvailableMethods)
|
|
|
|
err := ctx.SetJSONBody(body)
|
|
if err != nil {
|
|
ctx.Logger.Errorf("Unable to set configuration response in body: %s", err)
|
|
}
|
|
}
|