Skip to content

Commit cf64d69

Browse files
committed
Fix commets in review
1 parent 5c45bc2 commit cf64d69

File tree

4 files changed

+23
-18
lines changed

4 files changed

+23
-18
lines changed

ydb/mvp/oidc_proxy/context.cpp

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -11,22 +11,22 @@ namespace NOIDC {
1111

1212
TContext::TContext(const TString& state, const TString& requestedAddress, bool isAjaxRequest)
1313
: State(state)
14-
, IsAjaxRequest(isAjaxRequest)
14+
, AjaxRequest(isAjaxRequest)
1515
, RequestedAddress(requestedAddress)
1616
{}
1717

1818
TContext::TContext(const NHttp::THttpIncomingRequestPtr& request)
1919
: State(GenerateState())
20-
, IsAjaxRequest(DetectAjaxRequest(request))
21-
, RequestedAddress(GetRequestedUrl(request, IsAjaxRequest))
20+
, AjaxRequest(DetectAjaxRequest(request))
21+
, RequestedAddress(GetRequestedUrl(request, AjaxRequest))
2222
{}
2323

2424
TString TContext::GetState() const {
2525
return State;
2626
}
2727

28-
bool TContext::GetIsAjaxRequest() const {
29-
return IsAjaxRequest;
28+
bool TContext::IsAjaxRequest() const {
29+
return AjaxRequest;
3030
}
3131

3232
TString TContext::GetRequestedAddress() const {
@@ -49,7 +49,7 @@ TString TContext::GenerateCookie(const TString& secret) const {
4949
stateStruct << "{\"state\":\"" << State
5050
<< "\",\"requested_address\":\"" << RequestedAddress
5151
<< "\",\"expiration_time\":" << ToString(expirationTime.TimeT())
52-
<< ",\"ajax_request\":" << (IsAjaxRequest ? "true" : "false") << "}";
52+
<< ",\"ajax_request\":" << (AjaxRequest ? "true" : "false") << "}";
5353
TString digest = HmacSHA256(secret, stateStruct);
5454
TString cookieStruct {"{\"state_struct\":\"" + Base64Encode(stateStruct) + "\",\"digest\":\"" + Base64Encode(digest) + "\"}"};
5555
return Base64Encode(cookieStruct);

ydb/mvp/oidc_proxy/context.h

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,15 @@ namespace NOIDC {
1616
class TContext {
1717
private:
1818
TString State;
19-
bool IsAjaxRequest = false;
19+
bool AjaxRequest = false;
2020
TString RequestedAddress;
2121

2222
public:
2323
TContext(const TString& state = "", const TString& requestedAddress = "", bool isAjaxRequest = false);
2424
TContext(const NHttp::THttpIncomingRequestPtr& request);
2525

2626
TString GetState() const;
27-
bool GetIsAjaxRequest() const;
27+
bool IsAjaxRequest() const;
2828
TString GetRequestedAddress() const;
2929

3030
TString CreateYdbOidcCookie(const TString& secret) const;

ydb/mvp/oidc_proxy/oidc_session_create_yandex.cpp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ void THandlerSessionCreateYandex::HandleCreateSession(TEvPrivate::TEvCreateSessi
6868
void THandlerSessionCreateYandex::HandleError(TEvPrivate::TEvErrorResponse::TPtr event, const NActors::TActorContext& ctx) {
6969
LOG_DEBUG_S(ctx, EService::MVP, "SessionService.Create(): " << event->Get()->Status);
7070
if (event->Get()->Status == "400") {
71-
RetryRequestToProtectedResource(ctx, "Can not create session cookie");
71+
RetryRequestToProtectedResource(ctx, "Cannot create session cookie");
7272
} else {
7373
NHttp::THeadersBuilder responseHeaders;
7474
responseHeaders.Set("Content-Type", "text/plain");

ydb/mvp/oidc_proxy/openid_connect.cpp

Lines changed: 14 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ NHttp::THttpOutgoingResponsePtr GetHttpOutgoingResponsePtr(const NHttp::THttpInc
7575
<< GetAuthCallbackUrl();
7676
NHttp::THeadersBuilder responseHeaders;
7777
responseHeaders.Set("Set-Cookie", context.CreateYdbOidcCookie(settings.ClientSecret));
78-
if (context.GetIsAjaxRequest()) {
78+
if (context.IsAjaxRequest()) {
7979
return CreateResponseForAjaxRequest(request, responseHeaders, redirectUrl);
8080
}
8181
responseHeaders.Set("Location", redirectUrl);
@@ -122,16 +122,21 @@ TRestoreOidcContextResult RestoreSessionStoredOnClientSide(const TString& state,
122122
stateStruct = jsonStateStruct->GetStringRobust();
123123
stateStruct = Base64Decode(stateStruct);
124124
}
125+
if (stateStruct.Empty()) {
126+
return TRestoreOidcContextResult({.IsSuccess = false,
127+
.IsErrorRetryable = false,
128+
.ErrorMessage = errorMessage << "Struct with state is empty"});
129+
}
125130
const NJson::TJsonValue* jsonDigest = nullptr;
126131
if (jsonValue.GetValuePointer("digest", &jsonDigest)) {
127132
expectedDigest = jsonDigest->GetStringRobust();
128133
expectedDigest = Base64Decode(expectedDigest);
129134
}
130-
}
131-
if (stateStruct.Empty() || expectedDigest.Empty()) {
132-
return TRestoreOidcContextResult({.IsSuccess = false,
133-
.IsErrorRetryable = false,
134-
.ErrorMessage = errorMessage << "Struct with state and expected digest are empty"});
135+
if (expectedDigest.Empty()) {
136+
return TRestoreOidcContextResult({.IsSuccess = false,
137+
.IsErrorRetryable = false,
138+
.ErrorMessage = errorMessage << "Expected digest is empty"});
139+
}
135140
}
136141
TString digest = HmacSHA256(secret, stateStruct);
137142
if (expectedDigest != digest) {
@@ -153,7 +158,7 @@ TRestoreOidcContextResult RestoreSessionStoredOnClientSide(const TString& state,
153158
} else {
154159
return TRestoreOidcContextResult({.IsSuccess = false,
155160
.IsErrorRetryable = false,
156-
.ErrorMessage = errorMessage << "Requested address not found in cookie"});
161+
.ErrorMessage = errorMessage << "Requested address was not found in the cookie"});
157162
}
158163
const NJson::TJsonValue* jsonExpirationTime = nullptr;
159164
if (jsonValue.GetValuePointer("expiration_time", &jsonExpirationTime)) {
@@ -169,15 +174,15 @@ TRestoreOidcContextResult RestoreSessionStoredOnClientSide(const TString& state,
169174
} else {
170175
return TRestoreOidcContextResult({.IsSuccess = false,
171176
.IsErrorRetryable = true,
172-
.ErrorMessage = errorMessage << "Expiration time not found in json"}, TContext(state, redirectUrl));
177+
.ErrorMessage = errorMessage << "Expiration time was not found in the json"}, TContext(state, redirectUrl));
173178
}
174179
const NJson::TJsonValue* jsonAjaxRequest = nullptr;
175180
if (jsonValue.GetValuePointer("ajax_request", &jsonAjaxRequest)) {
176181
isAjaxRequest = jsonAjaxRequest->GetBooleanRobust();
177182
} else {
178183
return TRestoreOidcContextResult({.IsSuccess = false,
179184
.IsErrorRetryable = true,
180-
.ErrorMessage = errorMessage << "Can not detect ajax request"}, TContext(state, redirectUrl));
185+
.ErrorMessage = errorMessage << "Cannot detect ajax request"}, TContext(state, redirectUrl));
181186
}
182187
}
183188
if (expectedState.Empty() || expectedState != state) {

0 commit comments

Comments
 (0)