lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-12 04:04:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

R78: hybrid Clear flush, reauth reacquire, pool CAS

Browse Source
This commit is contained in:
lukaszraczylo
2026-08-13 18:17:04 +01:00
parent 0e57c0cad3
commit 1c5e301730
5 changed files with 188 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
middleware.go
+26 -4
View File
@@ -580,8 +580,19 @@ func (t *TraefikOidc) processAuthorizedRequestRS(rw http.ResponseWriter, req *ht
if err := session.Clear(req, rw); err != nil {
t.logger.Errorf("Error clearing invalidated session: %v", err)
}
session.ResetRedirectCount()
t.defaultInitiateAuthentication(rw, req, session, redirectURL)
// Clear already returned `session` to the shared pool via
// returnToPoolSafely; re-acquire an owned session so a
// concurrent GetSession can't pop the pooled object while we
// write the re-auth challenge into it.
ns, gerr := t.sessionManager.GetSession(req)
if gerr != nil {
t.logger.Errorf("Error creating session for re-authentication: %v", gerr)
t.sendErrorResponse(rw, req, "Failed to start re-authentication", http.StatusInternalServerError)
return
}
ns.ResetRedirectCount()
t.defaultInitiateAuthentication(rw, req, ns, redirectURL)
ns.returnToPoolSafely()
return
}
}
@@ -662,8 +673,19 @@ func (t *TraefikOidc) processAuthorizedRequest(rw http.ResponseWriter, req *http
if err := session.Clear(req, rw); err != nil {
t.logger.Errorf("Error clearing invalidated session: %v", err)
}
session.ResetRedirectCount()
t.defaultInitiateAuthentication(rw, req, session, redirectURL)
// Clear already returned `session` to the shared pool via
// returnToPoolSafely; re-acquire an owned session so a
// concurrent GetSession can't pop the pooled object while we
// write the re-auth challenge into it.
ns, gerr := t.sessionManager.GetSession(req)
if gerr != nil {
t.logger.Errorf("Error creating session for re-authentication: %v", gerr)
t.sendErrorResponse(rw, req, "Failed to start re-authentication", http.StatusInternalServerError)
return
}
ns.ResetRedirectCount()
t.defaultInitiateAuthentication(rw, req, ns, redirectURL)
ns.returnToPoolSafely()
return
}
}