haskal
/
jiti-meet
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FEAT: token util better logging for timeouts, verification

This commit is contained in:
Aaron van Meerten 2020-08-14 13:52:25 -05:00
parent d716665f27
commit e439d065b7
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
resources/prosody-plugins/token/util.lib.lua
View File

@ -152,7 +152,10 @@ function Util:get_public_key(keyId)
-- TODO: This check is racey. Not likely to be a problem, but we should -- TODO: This check is racey. Not likely to be a problem, but we should
-- still stick a mutex on content / code at some point. -- still stick a mutex on content / code at some point.
if code == nil then if code == nil then
http.destroy_request(request); module:log("warn", "Timeout %s seconds fetching public key from: %s",http_timeout,keyurl);
if http.destroy_request then
http.destroy_request(request);
end
done(); done();
end end
end end
@ -175,6 +178,7 @@ end
-- @param 'iss' claim from the token to verify -- @param 'iss' claim from the token to verify
-- @return nil and error string or true for accepted claim -- @return nil and error string or true for accepted claim
function Util:verify_issuer(issClaim) function Util:verify_issuer(issClaim)
module:log("debug","verify_issuer claim: %s against accepted: %s",issClaim, self.acceptedIssuers);
for i, iss in ipairs(self.acceptedIssuers) do for i, iss in ipairs(self.acceptedIssuers) do
if issClaim == iss then if issClaim == iss then
--claim matches an accepted issuer so return success --claim matches an accepted issuer so return success
@ -189,6 +193,7 @@ end
-- @param 'aud' claim from the token to verify -- @param 'aud' claim from the token to verify
-- @return nil and error string or true for accepted claim -- @return nil and error string or true for accepted claim
function Util:verify_audience(audClaim) function Util:verify_audience(audClaim)
module:log("debug","verify_audience claim: %s against accepted: %s",audClaim, self.acceptedAudiences);
for i, aud in ipairs(self.acceptedAudiences) do for i, aud in ipairs(self.acceptedAudiences) do
if aud == '*' then if aud == '*' then
--* indicates to accept any audience in the claims so return success --* indicates to accept any audience in the claims so return success