Mirrors/wireguard_webadmin
1
0
Fork 0
mirror of https://github.com/eduardogsilva/wireguard_webadmin.git synced 2026-03-17 14:26:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

enhance policy validation by ensuring protected policies have authentication methods and defaulting to HTTPS in external URL construction

Browse Source
This commit is contained in:
Eduardo Silva
2026-03-16 21:05:16 -03:00
parent cf4674b933
commit 8418beb482
2 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
containers/auth-gateway/auth_gateway/services/policy_engine.py
View File

@@ -52,6 +52,13 @@ def build_effective_policy(runtime_config: RuntimeConfig, policy_name: str) -> E
if policy.policy_type != "protected": if policy.policy_type != "protected":
return effective return effective
if not policy.methods:
return EffectivePolicy(
name=policy_name,
mode="error",
error_message="Policy configuration error: protected policy has no authentication methods.",
)
for method_name in policy.methods: for method_name in policy.methods:
method = runtime_config.auth_methods[method_name] method = runtime_config.auth_methods[method_name]
if isinstance(method, IPAddressMethodModel): if isinstance(method, IPAddressMethodModel):

2
containers/auth-gateway/auth_gateway/web/dependencies.py
View File

@@ -24,6 +24,8 @@ def get_session(request: Request) -> SessionRecord | None:
def build_external_url(request: Request, path: str, **params: str) -> str: def build_external_url(request: Request, path: str, **params: str) -> str:
proto = request.headers.get("x-forwarded-proto", request.url.scheme) proto = request.headers.get("x-forwarded-proto", request.url.scheme)
if proto not in ("http", "https"):
proto = "https"
host = request.headers.get("host", request.url.netloc) host = request.headers.get("host", request.url.netloc)
prefix = request.app.state.settings.external_path.rstrip("/") prefix = request.app.state.settings.external_path.rstrip("/")
query = urlencode({key: value for key, value in params.items() if value is not None}) query = urlencode({key: value for key, value in params.items() if value is not None})