From 670b1609450360b0a1fa0e73ac67e27602ac8d59 Mon Sep 17 00:00:00 2001 From: Peter Grlica Date: Thu, 27 May 2021 11:54:33 +0200 Subject: [PATCH] SAML payload id and validation on jwt claims --- auth/external/auth_handler.go | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/auth/external/auth_handler.go b/auth/external/auth_handler.go index 6decc4d9b..1947a4c4e 100644 --- a/auth/external/auth_handler.go +++ b/auth/external/auth_handler.go @@ -53,6 +53,10 @@ func (eh *externalSamlAuthHandler) CompleteUserAuth(w http.ResponseWriter, r *ht if session != nil { sess := (session.(samlsp.JWTSessionClaims)) + if sess.StandardClaims.Valid() != nil { + return nil, sess.StandardClaims.Valid() + } + u = &types.ExternalAuthUser{} u.Provider = "saml" @@ -68,6 +72,8 @@ func (eh *externalSamlAuthHandler) CompleteUserAuth(w http.ResponseWriter, r *ht u.Name = sess.Attributes.Get(eh.service.IDPUserMeta.Name) u.NickName = sess.Attributes.Get(eh.service.IDPUserMeta.Handle) } + + u.UserID = sess.Attributes.Get("SessionIndex") } return