dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Refuse to use DevOps when useSafeJail=0 (#1091)

Browse Source
This commit is contained in:
Xavier Guimard 2017-02-22 22:16:43 +00:00
parent d3766ff37a
commit 597e4c7c68
1 changed files with 19 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
lemonldap-ng-handler/lib/Lemonldap/NG/Handler/Lib/DevOps.pm
View File

@ -24,24 +24,32 @@ sub grant {
{
$class->loadVhostConfig($vhost);
}
return $class->Lemonldap::NG::Handler::Main::grant( $session, $uri, $cond, $vhost );
return $class->Lemonldap::NG::Handler::Main::grant( $session, $uri, $cond,
$vhost );
}
sub loadVhostConfig {
my ( $class, $vhost ) = @_;
my $base = $class->localConfig->{loopBackUrl} || "http://127.0.0.1:" . $class->get_server_port;
my $req =
HTTP::Request->new(
GET => "$base/rules.json" );
$req->header( Host => $vhost );
my $resp = $class->ua->request($req);
my $json;
if ( $resp->is_success ) {
eval { $json = from_json( $resp->content ) };
if ($@) {
$class->logger->error("Bad rules.json for $vhost, skipping ($@)");
if ( $class->tsv->{useSafeJail} ) {
my $base = $class->localConfig->{loopBackUrl}
|| "http://127.0.0.1:" . $class->get_server_port;
my $req = HTTP::Request->new( GET => "$base/rules.json" );
$req->header( Host => $vhost );
my $resp = $class->ua->request($req);
if ( $resp->is_success ) {
eval { $json = from_json( $resp->content ) };
if ($@) {
$class->logger->error(
"Bad rules.json for $vhost, skipping ($@)");
}
}
}
else {
$class->logger->error(
q"I refuse to compile rules.json when useSafeJail isn't activated! Yes I know, I'm a coward..."
);
}
$json->{rules} ||= { default => 1 };
$json->{headers} //= { 'Auth-User' => '$uid' };
$class->locationRulesInit( undef, { $vhost => $json->{rules} } );