Merge pull request #223030 from IndeedNotJames/nginx-sso

nginx-sso: 0.25.0 -> 0.26.0

authored by Pierre Bourdon and committed by GitHub 5f2fd25d bab0c658

+3 -18
+3 -5
pkgs/servers/nginx-sso/default.nix
··· 6 6 7 7 buildGoModule rec { 8 8 pname = "nginx-sso"; 9 - version = "0.25.0"; 9 + version = "0.26.0"; 10 10 11 11 src = fetchFromGitHub { 12 12 owner = "Luzifer"; 13 13 repo = "nginx-sso"; 14 14 rev = "v${version}"; 15 - sha256 = "sha256-uYl6J2auAkboPpT6lRZzI70bCU9LvxfCdCyHfLNIsHw="; 15 + hash = "sha256-vtbomeezW8PMv2lCR6PJqYw+PCFJ3M1SAQPGaIWouXY="; 16 16 }; 17 17 18 - vendorSha256 = null; 19 - 20 - patches = [ ./rune.patch ]; 18 + vendorHash = "sha256-THTQhUgIfDDTgnR4qZxWFoGQzvqr3xrrz5ZxnV9ipBM="; 21 19 22 20 postInstall = '' 23 21 mkdir -p $out/share
-13
pkgs/servers/nginx-sso/rune.patch
··· 1 - diff --git i/main.go w/main.go 2 - index bf80f3d..632f7d6 100644 3 - --- i/main.go 4 - +++ w/main.go 5 - @@ -174,7 +174,7 @@ func handleAuthRequest(res http.ResponseWriter, r *http.Request) { 6 - case plugins.ErrNoValidUserFound: 7 - // No valid user found, check whether special anonymous "user" has access 8 - // Username is set to 0x0 character to prevent accidental whitelist-match 9 - - if mainCfg.ACL.HasAccess(string(0x0), nil, r) { 10 - + if mainCfg.ACL.HasAccess(string(rune(0x0)), nil, r) { 11 - mainCfg.AuditLog.Log(auditEventValidate, r, map[string]string{"result": "anonymous access granted"}) // #nosec G104 - This is only logging 12 - res.WriteHeader(http.StatusOK) 13 - return