首頁 探索 說明
登入
golang
/
netmaker
镜像来自 https://github.com/gravitl/netmaker
2
0
複刻 0
檔案 問題管理 0 Wiki
瀏覽代碼

block oauth login for normal user

Abhishek Kondur 1 年之前
父節點
5c878eac22
當前提交
f57abc7bb8
共有 2 個文件被更改，包括 34 次插入 和 0 次删除
統一視圖 顯示文件統計
  1. 25 0
      auth/error.go
  2. 9 0
      auth/google.go

+ 25 - 0
auth/error.go
查看文件 

@@ -10,6 +10,31 @@ const oauthNotConfigured = `<!DOCTYPE html><html>
 
 </body>
 
 </body>
 
 </html>`
 
 </html>`
 
 
 
+const userNotAllowed = `<!DOCTYPE html><html>
 
+<body>
 
+<h3>Only Admins are allowed to access Dashboard.</h3>
 
+<p>Non-Admins can access the netmaker networks using <a href="https://docs.netmaker.io/pro/rac.html" target="_blank" rel="noopener">RemoteAccessClient.</a></p>
 
+</body>
 
+</html>
 
+`
 
+const userNotFound = `<!DOCTYPE html><html>
 
+<body>
 
+<h3>User Not Found.</h3>
 
+</body>
 
+</html>`
 
+
 
+func handleOauthUserNotFound(response http.ResponseWriter) {
 
+	response.Header().Set("Content-Type", "text/html; charset=utf-8")
 
+	response.WriteHeader(http.StatusNotFound)
 
+	response.Write([]byte(userNotFound))
 
+}
 
+
 
+func handleOauthUserNotAllowed(response http.ResponseWriter) {
 
+	response.Header().Set("Content-Type", "text/html; charset=utf-8")
 
+	response.WriteHeader(http.StatusForbidden)
 
+	response.Write([]byte(userNotAllowed))
 
+}
 
+
 
 // handleOauthNotConfigured - returns an appropriate html page when oauth is not configured on netmaker server but an oauth login was attempted
 
 // handleOauthNotConfigured - returns an appropriate html page when oauth is not configured on netmaker server but an oauth login was attempted
 
 func handleOauthNotConfigured(response http.ResponseWriter) {
 
 func handleOauthNotConfigured(response http.ResponseWriter) {
 
 	response.Header().Set("Content-Type", "text/html; charset=utf-8")
 
 	response.Header().Set("Content-Type", "text/html; charset=utf-8")

+ 9 - 0
auth/google.go
查看文件 

@@ -68,6 +68,15 @@ func handleGoogleCallback(w http.ResponseWriter, r *http.Request) {
 
 			return
 
 			return
 
 		}
 
 		}
 
 	}
 
 	}
 
+	user, err := logic.GetUser(content.Email)
 
+	if err != nil {
 
+		handleOauthUserNotFound(w)
 
+		return
 
+	}
 
+	if !(user.IsSuperAdmin || user.IsAdmin) {
 
+		handleOauthUserNotAllowed(w)
 
+		return
 
+	}
 
 	var newPass, fetchErr = fetchPassValue("")
 
 	var newPass, fetchErr = fetchPassValue("")
 
 	if fetchErr != nil {
 
 	if fetchErr != nil {
 
 		return
 
 		return