Ailur
/
burgerauth
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

Pass through the nonce in the /app proxy

This commit is contained in:
Tracker-Friendly 2024-05-04 18:58:41 +01:00
parent 1f39df281d
commit 402c310677
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
main.go
View File

@ -768,7 +768,7 @@ func main() {
return return
} }
if nonce == "" { if nonce == "none" {
nonce = genSalt(512) nonce = genSalt(512)
} }

10
templates/main.html
View File

@ -8,7 +8,7 @@
<script src="/static/js/hash-wasm.js"></script> <script src="/static/js/hash-wasm.js"></script>
<link rel="icon" href="/static/svg/favicon.svg"> <link rel="icon" href="/static/svg/favicon.svg">
<script> <script>
let client_id, redirect_uri, response_type, state, code, codemethod, secret_key, expires; let client_id, redirect_uri, response_type, state, code, codemethod, secret_key, expires, nonce;
if (localStorage.getItem("DONOTSHARE-secretkey") === null) { if (localStorage.getItem("DONOTSHARE-secretkey") === null) {
window.location.replace("/login" + window.location.search) window.location.replace("/login" + window.location.search)
@ -42,6 +42,12 @@
codemethod = "none"; codemethod = "none";
} }
if (urlParams.has('nonce')) {
nonce = urlParams.get('nonce');
} else {
nonce = "none";
}
// Get DONOTSHARE-secretkey from localStorage // Get DONOTSHARE-secretkey from localStorage
secret_key = localStorage.getItem("DONOTSHARE-secretkey"); secret_key = localStorage.getItem("DONOTSHARE-secretkey");
const now = new Date(); const now = new Date();
@ -53,7 +59,7 @@
document.cookie = "key=" + secret_key + "; expires=" + expires + "; path=/"; document.cookie = "key=" + secret_key + "; expires=" + expires + "; path=/";
// Send data to example.org using POST request // Send data to example.org using POST request
window.location.replace("/api/auth?client_id=" + client_id + "&redirect_uri=" + redirect_uri + "&code_challenge_method=" + codemethod + "&code_challenge=" + code + "&state=" + state); window.location.replace("/api/auth?client_id=" + client_id + "&redirect_uri=" + redirect_uri + "&code_challenge_method=" + codemethod + "&code_challenge=" + code + "&state=" + state + "&nonce=" + nonce);
} }
</script> </script>
</head> </head>