lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-14 04:07:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Invalidate user session with provider on logout

Browse Source
This commit is contained in:
lukaszraczylo
2024-10-03 14:00:43 +01:00
parent 6cd06831f0
commit a7d42de0a4
4 changed files with 67 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
main_test.go
+21
View File
@@ -114,6 +114,7 @@ func (suite *TraefikOidcTestSuite) SetupTest() {
authURL: "https://example.com/auth",
tokenURL: "https://example.com/token",
jwksURL: "https://example.com/.well-known/jwks.json",
revocationURL: "https://example.com/revoke",
tokenVerifier: suite.mockTokenVerifier,
jwtVerifier: suite.mockJWTVerifier,
}
@@ -376,10 +377,20 @@ func (suite *TraefikOidcTestSuite) TestHandleLogout() {
suite.mockStore.On("Get", req, cookieName).Return(session, nil)
suite.mockStore.On("Save", mock.Anything, mock.Anything, mock.Anything).Return(nil)
// Mock the HTTP client for token revocation
suite.mockHTTPClient.On("RoundTrip", mock.MatchedBy(func(req *http.Request) bool {
return req.URL.String() == suite.oidc.revocationURL
})).Return(&http.Response{
StatusCode: http.StatusOK,
Body: io.NopCloser(strings.NewReader(`{"status":"ok"}`)),
}, nil)
suite.oidc.handleLogout(rw, req)
suite.Equal(http.StatusForbidden, rw.Code)
suite.Equal("Logged out\n", rw.Body.String())
suite.mockHTTPClient.AssertExpectations(suite.T())
}
func (suite *TraefikOidcTestSuite) TestExtractClaims() {
@@ -784,10 +795,20 @@ func (suite *TraefikOidcTestSuite) TestHandleLogout_CustomLogoutURL() {
suite.mockStore.On("Get", req, cookieName).Return(session, nil)
suite.mockStore.On("Save", mock.Anything, mock.Anything, mock.Anything).Return(nil)
// Mock the HTTP client for token revocation
suite.mockHTTPClient.On("RoundTrip", mock.MatchedBy(func(req *http.Request) bool {
return req.URL.String() == suite.oidc.revocationURL
})).Return(&http.Response{
StatusCode: http.StatusOK,
Body: io.NopCloser(strings.NewReader(`{"status":"ok"}`)),
}, nil)
suite.oidc.ServeHTTP(rw, req)
suite.Equal(http.StatusForbidden, rw.Code)
suite.Equal("Logged out\n", rw.Body.String())
suite.mockHTTPClient.AssertExpectations(suite.T())
}
func (suite *TraefikOidcTestSuite) TestVerifyToken_RateLimitReached() {