Starship/CoreID
1
0
Fork 0
Code Issues 8 Pull Requests Releases 34 Wiki Activity

Add support for session traps; make mfa challenge session trap; remove DMZ middleware

Browse Source
This commit is contained in:
garrettmills
2020-05-22 09:29:13 -05:00
parent 8701df1acc
commit 64356d42d0
11 changed files with 49 additions and 51 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/routing/routers/api/v1/auth.routes.js
View File

@@ -58,7 +58,7 @@ const auth_routes = {
],
'/mfa/attempt': [
'middleware::auth:DMZOnly',
'middleware::auth:UserOnly',
'controller::api:v1:Auth.attempt_mfa'
],

8
app/routing/routers/auth/forms.routes.js
View File

@@ -51,7 +51,7 @@ const index = {
'/:provider/logout': [
'middleware::auth:ProviderRoute',
'middleware::auth:DMZOnly',
'middleware::auth:UserOnly',
'controller::auth:Forms.logout_provider_clean_session',
// Note, this separation is between when the auth action has happened properly
@@ -62,7 +62,7 @@ const index = {
],
'/logout': [
'middleware::auth:ProviderRoute',
'middleware::auth:DMZOnly',
'middleware::auth:UserOnly',
'controller::auth:Forms.logout_provider_clean_session',
'controller::auth:Forms.logout_provider_present_success',
],
@@ -100,13 +100,13 @@ const index = {
],
'/:provider/logout': [
'middleware::auth:ProviderRoute',
'middleware::auth:DMZOnly',
'middleware::auth:UserOnly',
'controller::auth:Forms.logout_provider_clean_session',
'controller::auth:Forms.logout_provider_present_success',
],
'/logout': [
'middleware::auth:ProviderRoute',
'middleware::auth:DMZOnly',
'middleware::auth:UserOnly',
'controller::auth:Forms.logout_provider_clean_session',
'controller::auth:Forms.logout_provider_present_success',
],

6
app/routing/routers/auth/mfa.routes.js
View File

@@ -2,25 +2,21 @@ const mfa_routes = {
prefix: '/auth/mfa',
middleware: [
'auth:UserOnly',
],
get: {
'/setup': [
'middleware::auth:UserOnly',
['middleware::auth:RequireTrust', { scope: 'mfa.enable' }],
'controller::auth:MFA.setup',
],
'/challenge': [
'middleware::auth:DMZOnly',
'controller::auth:MFA.challenge',
],
'/disable': [
'middleware::auth:UserOnly',
'controller::auth:MFA.get_disable',
],
'/disable/process': [
'middleware::auth:UserOnly',
['middleware::auth:RequireTrust', { scope: 'mfa.disable' }],
'controller::auth:MFA.do_disable',
],