🚧 Add path to cookie

This commit is contained in:
Andreas Dinauer 2026-03-15 11:53:23 +01:00
parent c2cfb36564
commit 068cc57639
2 changed files with 2 additions and 4 deletions

View File

@ -1,13 +1,11 @@
package dev.dinauer.oidcproxy.callback; package dev.dinauer.oidcproxy.callback;
import dev.dinauer.oidcproxy.callback.model.TokenResponse; import dev.dinauer.oidcproxy.callback.model.TokenResponse;
import io.quarkus.vertx.web.Route;
import io.vertx.core.http.Cookie; import io.vertx.core.http.Cookie;
import io.vertx.core.http.HttpServerRequest; import io.vertx.core.http.HttpServerRequest;
import io.vertx.core.http.HttpServerResponse; import io.vertx.core.http.HttpServerResponse;
import jakarta.enterprise.context.ApplicationScoped; import jakarta.enterprise.context.ApplicationScoped;
import jakarta.inject.Inject; import jakarta.inject.Inject;
import jakarta.ws.rs.core.Context;
import org.eclipse.microprofile.config.inject.ConfigProperty; import org.eclipse.microprofile.config.inject.ConfigProperty;
import java.time.ZonedDateTime; import java.time.ZonedDateTime;
@ -29,7 +27,7 @@ public class CallbackService
String code = request.params().get("code"); String code = request.params().get("code");
TokenResponse token = client.exchangeAuthorizationCode(code); TokenResponse token = client.exchangeAuthorizationCode(code);
String sessionId = sessionRepository.add(token.accessToken()); String sessionId = sessionRepository.add(token.accessToken());
response.addCookie(Cookie.cookie("session", sessionId).setHttpOnly(true).setSecure(true).setMaxAge((int) (token.expiresAt() - ZonedDateTime.now().toEpochSecond()))); response.addCookie(Cookie.cookie("session", sessionId).setHttpOnly(true).setSecure(true).setPath("/").setMaxAge((int) (token.expiresAt() - ZonedDateTime.now().toEpochSecond())));
response.setStatusCode(302); response.setStatusCode(302);
response.putHeader("Location", redirectURI); response.putHeader("Location", redirectURI);
response.send(); response.send();

View File

@ -1,4 +1,4 @@
oidc.proxy.client.auth-url=http://localhost:8089/api/iam-backend/realms/maven/protocol/openid-connect/token oidc.proxy.client.auth-url=http://localhost:8089/api/realms/maven/protocol/openid-connect/token
oidc.proxy.client.id=backend oidc.proxy.client.id=backend
oidc.proxy.client.secret=backend oidc.proxy.client.secret=backend
oidc.proxy.client.redirect=http://localhost:3000 oidc.proxy.client.redirect=http://localhost:3000