Projet

Général

Profil

0001-auth_oidc-log-bad-requests-while-attempting-to-login.patch

Paul Marillonnet, 27 octobre 2020 15:37

Télécharger (1,33 ko)

Voir les différences: 

Subject: [PATCH] auth_oidc: log bad requests while attempting to login
 (#47656)


 src/authentic2_auth_oidc/views.py | 3 +++
 1 file changed, 3 insertions(+)
src/authentic2_auth_oidc/views.py
83 83 

  		




  84
  84
  
    
@setting_enabled('ENABLE', settings=app_settings)

  		




  85
  85
  
    
def login_initiate(request, *args, **kwargs):

  		




  
  86
  
    
    logger = logging.getLogger(__name__)

  		




  86
  87
  
    
    if 'iss' not in request.GET:

  		




  
  88
  
    
        logger.warning('auth_oidc: missing iss parameter in %r' % request.GET)

  		




  87
  89
  
    
        return HttpResponseBadRequest('missing iss parameter', content_type='text/plain')

  		




  88
  90
  
    
    issuer = request.GET['iss']

  		




  89
  91
  
    
    try:

  		




  90
  92
  
    
        provider = get_provider_by_issuer(issuer)

  		




  91
  93
  
    
    except models.OIDCProvider.DoesNotExist:

  		




  
  94
  
    
        logger.warning('auth_oidc: unknown issuer %s', issuer)

  		




  92
  95
  
    
        return HttpResponseBadRequest(u'unknown issuer %s' % issuer, content_type='text/plain')

  		




  93
  96
  
    
    return oidc_login(request, pk=provider.pk, next_url=request.GET.get('target_link_uri'))

  		




  94
  97
  
    

  		




  95
  
  
    
-