From d5d69b69a76e5892ebafd7bd9020090000a095cd Mon Sep 17 00:00:00 2001
From: Quantum <quantum2048@gmail.com>
Date: Sat, 21 Aug 2021 17:14:44 -0400
Subject: [PATCH] Correctly authenticate non-GET requests
---
nginx_krbauth.py | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/nginx_krbauth.py b/nginx_krbauth.py
index 2deb6d8..a4449f3 100644
--- a/nginx_krbauth.py
+++ b/nginx_krbauth.py
@@ -16,6 +16,7 @@ from werkzeug.routing import Rule
app = Flask(__name__)
app.logger.setLevel(logging.INFO)
+app.url_map.add(Rule('/krbauth', endpoint='krbauth.auth'))
app.url_map.add(Rule('/krbauth/check', endpoint='krbauth.check'))
timestamp = struct.Struct('!q')
@@ -169,7 +170,7 @@ def auth_basic(context: Context, next_url: str) -> Response:
return auth_success(context, next_url)
-@app.route('/krbauth')
+@app.endpoint('krbauth.auth')
def auth() -> Response:
next_url = request.args.get('next', '/')
context = Context.from_request()