Method getOIDCCallbackURL

rest/oidc_api.go:300–329

Builds the OIDC callback based on the current request. Used during OIDC Client lazy initialization. Need to pass providerName and isDefault for the requested provider to determine whether we need to append it to the callback URL or not.

(providerName string, isDefault bool)

// Builds the OIDC callback based on the current request. Used during OIDC Client lazy initialization.
// Need to pass providerName and isDefault for the requested provider to determine whether we need to append it to the callback URL or not.
func (h *handler) getOIDCCallbackURL(providerName string, isDefault bool) string {
	// h.db not initialized at this point (checkPublicAuth) from validateAndWriteHeaders
	// we'll have to pull it out of the router path rather than using h.db.Name
	dbName := h.PathVar("db")
	if dbName == "" {
		// could be a keyspace-scoped request instead
		dbName, _, _, _ = ParseKeyspace(h.PathVar("keyspace"))
	}

	if dbName == "" {
		base.WarnfCtx(h.ctx(), "Can't calculate OIDC callback URL without DB in path.")
		return ""
	}

	scheme := "http"
	if h.rq.TLS != nil {
		scheme = "https"
	}

	callbackURL := scheme + "://" + h.rq.Host + "/" + dbName + "/_oidc_callback"
	if isDefault || providerName == "" {
		return callbackURL
	}

	callbackURL, err := auth.SetURLQueryParam(callbackURL, auth.OIDCAuthProvider, providerName)
	if err != nil {
		base.WarnfCtx(h.ctx(), "Failed to add provider %q to OIDC callback URL (%s): %v", base.UD(providerName), callbackURL, err)
	}
	return callbackURL
}

// makeStateCookie creates a new state cookie with the specified value and Max-Age.
// Max-Age has precedence whilst determining the state cookie expiration even though