ip

Author: NewNimo

handlers/auth.go

@@ -53,7 +53,7 @@ func CallbackHandler(w http.ResponseWriter, r *http.Request) {
 // - validate info from oauth provider (Google, GitHub, OIDC, etc)
 // - issue jwt in the form of a cookie
 func AuthStateHandler(w http.ResponseWriter, r *http.Request) {
-	log.Debug("/auth/{state}/ api")
+	log.Debug("/auth/{state}/")
 	// Handle the exchange code to initiate a transport.
 
 	session, err := sessstore.Get(r, cfg.Cfg.Session.Name)

pkg/jwtmanager/jwtcache.go

@@ -54,6 +54,7 @@ func JWTCacheHandler(next http.Handler) http.Handler {
 		// check to see if the request is from a whitelisted IP
 		ipWhitelist := cfg.Cfg.IPWhiteList
 		ipHost, _, _ := net.SplitHostPort(r.RemoteAddr) // 去掉端口
+		log.Debugf("request ip: %s", ipHost)
 		for _, wip := range ipWhitelist {
 			if ipHost == wip {
 				logger.Debug("IP whitelisted, access granted")

pkg/providers/common/common.go

@@ -35,11 +35,9 @@ func PrepareTokensAndClient(r *http.Request, ptokens *structs.PTokens, setProvid
 	sslClient := ClientWithCert(&http.Client{})
 	ctx := context.WithValue(context.TODO(), oauth2.HTTPClient, sslClient)
 	providerToken, err := cfg.OAuthClient.Exchange(ctx, r.URL.Query().Get("code"), opts...)
-	log.Debugf("----->PrepareTokensAndClient 1")
 	if err != nil {
 		return nil, nil, err
 	}
-	log.Debugf("----->PrepareTokensAndClient 2")
 	ptokens.PAccessToken = providerToken.AccessToken
 
 	if setProviderToken {
@@ -59,17 +57,17 @@ func PrepareTokensAndClient(r *http.Request, ptokens *structs.PTokens, setProvid
 }
 
 func ClientWithCert(client *http.Client) *http.Client {
-	log.Debugf("----->ClientWithCert 1")
+	log.Debugf("ClientWithCert")
 	certFile := cfg.Cfg.TLS.ClientCertFile
 	keyFile := cfg.Cfg.TLS.ClientKeyFile
 	if certFile == "" || keyFile == "" {
-		log.Debugf("----->client ssl is null")
+		log.Debugf("client ssl is null")
 		return client
 	}
 	// 加载客户端证书
 	cert, err := tls.LoadX509KeyPair(certFile, keyFile)
 	if err != nil {
-		log.Debugf("----->client ssl load error: %v", err)
+		log.Debugf("client ssl load error: %v", err)
 		return client
 	}
 
@@ -95,7 +93,7 @@ func ClientWithCert(client *http.Client) *http.Client {
 			TLSClientConfig: tlsConfig,
 		}
 	}
-	log.Debugf("----->with client ssl success")
+	log.Debugf("ClientWithCert success")
 	return client
 }
 

pkg/providers/openid/openid.go

@@ -35,14 +35,12 @@ func (Provider) Configure() {
 
 // GetUserInfo provider specific call to get userinfomation
 func (Provider) GetUserInfo(r *http.Request, user *structs.User, customClaims *structs.CustomClaims, ptokens *structs.PTokens, opts ...oauth2.AuthCodeOption) (rerr error) {
-	log.Debugf("----->client ssl  get userinfo ")
 	client, _, err := common.PrepareTokensAndClient(r, ptokens, true, opts...)
 	if err != nil {
 		return err
 	}
 	userinfo, err := client.Get(cfg.GenOAuth.UserInfoURL)
 	if err != nil {
-		log.Debugf("----->cclient ssl userinfo error: %v", err)
 		return err
 	}
 	defer func() {