From 95f314b89dd10983c08debb96e3030e880e4c089 Mon Sep 17 00:00:00 2001
From: Dominik Hebeler <dominik@suma-ev.de>
Date: Wed, 20 Jan 2021 11:25:48 +0100
Subject: [PATCH] added Logs to identify wrong part of authorization
---
app/Http/Controllers/ProxyController.php | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/app/Http/Controllers/ProxyController.php b/app/Http/Controllers/ProxyController.php
index eed0abf..2a409fd 100644
--- a/app/Http/Controllers/ProxyController.php
+++ b/app/Http/Controllers/ProxyController.php
@@ -105,6 +105,7 @@ class ProxyController extends Controller
public function proxy(Request $request)
{
if(!$request->filled("url") || !$request->filled("password") || !$request->filled("valid-until")){
+ Log::info("Request with missing url, password or valid-until");
abort(400, "Invalid Request");
}
@@ -114,6 +115,7 @@ class ProxyController extends Controller
// Check Password
if(!self::checkPassword($targetUrl, $validUntil, $password)){
+ Log::info("Password incorrect");
abort(400, "Invalid Request");
}
@@ -124,6 +126,7 @@ class ProxyController extends Controller
}
if ($validUntil->isBefore(Carbon::now()->setTimezone("UTC"))) {
+ Log::info("URL expired");
abort(400, "Invalid Request");
}
@@ -133,6 +136,7 @@ class ProxyController extends Controller
// The target URL couldn't be parsed. This is probably a malformed URL
// The URL to load itself is a URL to our proxy
if($host === false || $host === $selfHost){
+ Log::info("URL to myself");
abort(404, "Invalid Request");
}
--
GitLab