Method Userinfo

internal/controller/oidc_controller.go:374–467

(c *gin.Context)

}

func (controller *OIDCController) Userinfo(c *gin.Context) {
	if !controller.oidc.IsConfigured() {
		tlog.App.Warn().Msg("OIDC not configured")
		c.JSON(404, gin.H{
			"error": "not_found",
		})
		return
	}

	var token string

	authorization := c.GetHeader("Authorization")
	if authorization != "" {
		tokenType, bearerToken, ok := strings.Cut(authorization, " ")
		if !ok {
			tlog.App.Warn().Msg("OIDC userinfo accessed with malformed authorization header")
			c.JSON(401, gin.H{
				"error": "invalid_request",
			})
			return
		}

		if strings.ToLower(tokenType) != "bearer" {
			tlog.App.Warn().Msg("OIDC userinfo accessed with invalid token type")
			c.JSON(401, gin.H{
				"error": "invalid_request",
			})
			return
		}

		token = bearerToken
	} else if c.Request.Method == http.MethodPost {
		if c.ContentType() != "application/x-www-form-urlencoded" {
			tlog.App.Warn().Msg("OIDC userinfo POST accessed with invalid content type")
			c.JSON(400, gin.H{
				"error": "invalid_request",
			})
			return
		}
		token = c.PostForm("access_token")
		if token == "" {
			tlog.App.Warn().Msg("OIDC userinfo POST accessed without access_token in body")
			c.JSON(401, gin.H{
				"error": "invalid_request",
			})
			return
		}
	} else {
		tlog.App.Warn().Msg("OIDC userinfo accessed without authorization header")
		c.JSON(401, gin.H{
			"error": "invalid_request",
		})
		return
	}

	entry, err := controller.oidc.GetAccessToken(c, controller.oidc.Hash(token))

	if err != nil {