OAuth updates

master
rob 2 years ago
parent ad4a4d2c2b
commit 9c5a3d3c94

@ -59,15 +59,15 @@ class OAuth2Service extends SiteService {
const verifyHttpBearer = this.verifyHttpBearer.bind(this); const verifyHttpBearer = this.verifyHttpBearer.bind(this);
const basicStrategy = new BasicStrategy(verifyClient); const basicStrategy = new BasicStrategy(verifyClient);
this.log.info('registering Basic strategy', { basicStrategy }); this.log.info('registering Basic strategy', { name: basicStrategy.name });
passport.use(basicStrategy); passport.use(basicStrategy);
const clientPasswordStrategy = new ClientPasswordStrategy(verifyClient); const clientPasswordStrategy = new ClientPasswordStrategy(verifyClient);
this.log.info('registering ClientPassword strategy', { clientPasswordStrategy }); this.log.info('registering ClientPassword strategy', { name: clientPasswordStrategy.name });
passport.use(clientPasswordStrategy); passport.use(clientPasswordStrategy);
const httpBearerStrategy = new BearerStrategy(verifyHttpBearer); const httpBearerStrategy = new BearerStrategy(verifyHttpBearer);
this.log.info('registering Bearer strategy', { httpBearerStrategy }); this.log.info('registering Bearer strategy', { name: httpBearerStrategy.name });
passport.use(httpBearerStrategy); passport.use(httpBearerStrategy);
} }
@ -274,13 +274,13 @@ class OAuth2Service extends SiteService {
return client; return client;
} }
async verifyClient(clientId, clientSecret, done) { async verifyClient (clientId, clientSecret, done) {
const client = await this.getClientById(clientId); const client = await this.getClientById(clientId);
if (!client) { if (!client) {
this.log.alert('OAuth2 request from unknown client', { clientId }); this.log.alert('OAuth2 request from unknown client', { clientId });
return done(null, false); return done(null, false);
} }
if (client.clientSecret !== clientSecret) { if (client.secret !== clientSecret) {
this.log.alert('OAuth2 client secret mismatch', { clientId }); this.log.alert('OAuth2 client secret mismatch', { clientId });
return done(null, false); return done(null, false);
} }

Loading…
Cancel
Save