add groups logging

This commit is contained in:
2023-06-24 22:38:00 -04:00
parent fcfde28999
commit c5b3f99172

View File

@@ -77,14 +77,12 @@ func authMiddleware(allowedGroups []string) gin.HandlerFunc {
if groupsenv != "" { if groupsenv != "" {
groups = strings.Split(groupsenv, ",") groups = strings.Split(groupsenv, ",")
} else { } else {
// Get the user groups from the request headers
groupsHeader := c.GetHeader("X-authentik-groups") groupsHeader := c.GetHeader("X-authentik-groups")
// Split the groups header value into individual groups fmt.Println(groupsHeader)
groups = strings.Split(groupsHeader, "|") groups = strings.Split(groupsHeader, "|")
} }
// Check if the user belongs to any of the allowed groups
isAllowed := false isAllowed := false
for _, allowedGroup := range allowedGroups { for _, allowedGroup := range allowedGroups {
for _, group := range groups { for _, group := range groups {
@@ -98,7 +96,6 @@ func authMiddleware(allowedGroups []string) gin.HandlerFunc {
} }
} }
// If the user is not in any of the allowed groups, respond with unauthorized access
if !isAllowed { if !isAllowed {
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{ c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
"message": "Unauthorized access", "message": "Unauthorized access",