From 5ee52143e86fcffbed232360e02712ddca243156 Mon Sep 17 00:00:00 2001 From: Joel Speed Date: Sat, 3 Apr 2021 12:14:03 +0100 Subject: [PATCH] Fix json input Everything has to go through a json round trip to work. HTTP Request has function members within it that means it cannot go through a JSON round trip, so nil that for now --- pkg/authorization/rego.go | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/pkg/authorization/rego.go b/pkg/authorization/rego.go index 2464e4bd..a31a5eed 100644 --- a/pkg/authorization/rego.go +++ b/pkg/authorization/rego.go @@ -7,9 +7,9 @@ import ( "github.com/open-policy-agent/opa/rego" ) -type authInput struct { - request *http.Request - session *sessionsapi.SessionState +type AuthInput struct { + Request *http.Request + Session *sessionsapi.SessionState } func authorize(req *http.Request, session *sessionsapi.SessionState) (bool, error) { @@ -21,7 +21,7 @@ package oauth2proxy default allow = false allow { - endswith(input.session.email, "@bar.com") + endswith(input.Session.Email, "@bar.com") } `), ) @@ -31,9 +31,9 @@ allow { return false, err } - input := rego.EvalInput(authInput{ - request: req, - session: session, + input := rego.EvalInput(AuthInput{ + Request: nil, + Session: session, }) result, err := query.Eval(req.Context(), input)