Commit 1db33e6
Rafał Miłecki
Detect redirection command in authentication response
In some situations server may command user agent to redirect to a
specific page as a result of (failed?) authentication attempt.
Examples of such responses:
1. ret=0,redir=/remote/login?&err=sslvpn_login_permission_denied&lang=en
2. ret=0,redir=/remote/login?&err=sslvpn_login_password_expired&lang=en
When using a real web browser it results in JavaScript redirecting user
to the URL from "redir" key.
In future we may try to use redirection info to retreive the cause of
authentication failure. It's not clear what would be the best way to
handle that. Check for "err" parameter value? Send another HTTP request?
For now just log relevant info for debugging purposes.
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>1 parent bb6be54 commit 1db33e6
1 file changed
Lines changed: 7 additions & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
661 | 661 | | |
662 | 662 | | |
663 | 663 | | |
664 | | - | |
| 664 | + | |
665 | 665 | | |
666 | 666 | | |
667 | 667 | | |
| |||
730 | 730 | | |
731 | 731 | | |
732 | 732 | | |
| 733 | + | |
| 734 | + | |
| 735 | + | |
| 736 | + | |
| 737 | + | |
| 738 | + | |
733 | 739 | | |
734 | 740 | | |
735 | 741 | | |
| |||
0 commit comments