nikola/pairgoth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Add logging

Browse Source
This commit is contained in:
Claude Brisson
2024-03-04 01:56:50 +01:00
parent d57a8030dc
commit 5c0b763751
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
api-webapp/src/main/kotlin/org/jeudego/pairgoth/api/TokenHandler.kt
View File

@@ -87,8 +87,11 @@ object TokenHandler: ApiHandler {
email email
}".toByteArray(StandardCharsets.UTF_8) }".toByteArray(StandardCharsets.UTF_8)
).toHex() ).toHex()
logger.trace("Expected signature: $expectedSignature")
logger.trace("Received signature: $signature")
if (signature == expectedSignature) { if (signature == expectedSignature) {
val accessKey = Randomizer.randomString(32) val accessKey = Randomizer.randomString(32)
logger.trace("Generating access key: $accessKey")
accesses.put(accessKey, Json.Object( accesses.put(accessKey, Json.Object(
"session" to session, "session" to session,
"email" to email "email" to email
@@ -102,6 +105,7 @@ object TokenHandler: ApiHandler {
override fun delete(request: HttpServletRequest, response: HttpServletResponse): Json { override fun delete(request: HttpServletRequest, response: HttpServletResponse): Json {
getAuthorizationPayload(request)?.let { payload -> getAuthorizationPayload(request)?.let { payload ->
logger.trace("Invalidating access key for session id ${payload.sessionId} with user infos ${payload.userInfos}")
accesses.invalidate(payload.accessKey) accesses.invalidate(payload.accessKey)
} }
return Json.Object("success" to true) return Json.Object("success" to true)
@@ -112,6 +116,7 @@ object TokenHandler: ApiHandler {
if (authValues != null && authValues.first.isNotEmpty()) { if (authValues != null && authValues.first.isNotEmpty()) {
val sessionId = authValues.first val sessionId = authValues.first
val challenge = Randomizer.randomString(32) val challenge = Randomizer.randomString(32)
logger.trace("Generated challenge: $challenge")
challenges.put(sessionId, challenge) challenges.put(sessionId, challenge)
response.addHeader("WWW-Authenticate", challenge) response.addHeader("WWW-Authenticate", challenge)
response.status = HttpServletResponse.SC_UNAUTHORIZED response.status = HttpServletResponse.SC_UNAUTHORIZED