Skip to content

Instantly share code, notes, and snippets.

@Gourds
Created January 15, 2021 02:38
Show Gist options
  • Save Gourds/6e48dd3af121cb44399bbeb7619bfb7a to your computer and use it in GitHub Desktop.
Save Gourds/6e48dd3af121cb44399bbeb7619bfb7a to your computer and use it in GitHub Desktop.
[2021-vp-config]
{"level":"warn","ts":1610677826.4281592,"msg":"setting `vouch.cookie.maxage` to `vouch.jwt.maxage` value of 240 minutes (curently set to 14400 minutes)"}
{"level":"info","ts":1610677826.428241,"msg":"jwt.secret read from /config/secret"}
{"level":"warn","ts":1610677826.4282463,"msg":"generating random session.key"}
{"level":"info","ts":1610677826.428365,"msg":"configuring oidc OAuth with Endpoint https://ynfyvjwiaw.login.aliyunidaas.com/oauth/authorize"}
2021-01-15T02:30:26.428Z INFO testing: true, using development console logger
{"level":"debug","ts":1610677826.4283721,"msg":"cfg.RootDir: /"}
2021-01-15T02:30:26.428Z DEBUG vouch.jwt.secret is 44 characters long
2021-01-15T02:30:26.428Z DEBUG vouch.session.key is 44 characters long
2021-01-15T02:30:26.428Z INFO jwtcache: the returned headers for a valid jwt will be cached for 20 minutes
2021-01-15T02:30:26.428Z DEBUG responses.Configure() attempting to parse templates with cfg.RootDir: /
{"level":"debug","ts":1610677826.4285436,"msg":"viper settings map[oauth:map[auth_url:https://ynfyvjwiaw.login.aliyunidaas.com/oauth/authorize callback_urls:[http://vouch.taiheops.com:2081/auth] client_id:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx client_secret:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx preferreddomain:taiheops.com provider:oidc scopes:[read] token_url:https://ynfyvjwiaw.login.aliyunidaas.com/oauth/token user_info_url:https://ynfyvjwiaw.login.aliyunidaas.com/api/bff/v1.2/oauth2/userinfo] vouch:map[allowallusers:true cookie:map[domain:taiheops.com maxage:14400 name:VouchCookie samesite:lax secure:false] headers:map[jwt:X-Vouch-Token querystring:access_token redirect:X-Vouch-Requested-URI] listen:0.0.0.0 loglevel:debug port:9090 testing:true]]"}
{"level":"debug","ts":1610677826.4285657,"msg":"cfg.GenOauth &{Provider:oidc ClientID:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ClientSecret:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx AuthURL:https://ynfyvjwiaw.login.aliyunidaas.com/oauth/authorize TokenURL:https://ynfyvjwiaw.login.aliyunidaas.com/oauth/token LogoutURL: RedirectURL: RedirectURLs:[http://vouch.taiheops.com:2081/auth] Scopes:[read] UserInfoURL:https://ynfyvjwiaw.login.aliyunidaas.com/api/bff/v1.2/oauth2/userinfo UserTeamURL: UserOrgURL: PreferredDomain:taiheops.com CodeChallengeMethod:}"}
{"level":"debug","ts":1610677826.4289572,"msg":"checking availability of tcp port: 0.0.0.0:9090"}
{"level":"info","ts":1610677826.429099,"msg":"starting Vouch Proxy","version":"4fe43a2","buildtime":"2021-01-13T21:12:14Z","buildhost":"d218748f53a5","branch":"master","semver":"v0.19.2","listen":"http://0.0.0.0:9090","tls":false,"oauth.provider":"oidc"}
{"level":"debug","ts":1610677826.429243,"msg":"serving static files from /static"}
2021-01-15T02:30:46.250Z DEBUG /auth
2021-01-15T02:30:46.250Z ERROR /auth Invalid session state: stored %!s(<nil>), returned VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt
2021-01-15T02:30:46.250Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:30:46.250Z DEBUG CaptureWriter.Write set w.StatusCode 400
2021-01-15T02:30:46.250Z DEBUG rendering error for user: 400 Bad Request
2021-01-15T02:30:46.251Z INFO |400| 443.978µs /auth {"statusCode": 400, "request": 1, "latency": "443.978µs", "avgLatency": "443.978µs", "ipPort": "172.17.0.1:37509", "method": "GET", "host": "vouch.taiheops.com", "path": "/auth", "referer": ""}
2021-01-15T02:31:19.977Z DEBUG /validate
2021-01-15T02:31:19.977Z ERROR no jwt found in request
2021-01-15T02:31:19.977Z DEBUG removing port from test_sso_nginx_a.taiheops.com:2081 to test domain test_sso_nginx_a.taiheops.com
2021-01-15T02:31:19.977Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:19.977Z DEBUG CaptureWriter.Write set w.StatusCode 401
2021-01-15T02:31:19.977Z INFO |401| 132.164µs /validate {"statusCode": 401, "request": 2, "latency": "132.164µs", "avgLatency": "288.071µs", "ipPort": "172.17.0.1:37539", "method": "GET", "host": "test_sso_nginx_a.taiheops.com:2081", "path": "/validate", "referer": ""}
2021-01-15T02:31:20.007Z DEBUG /login
2021-01-15T02:31:20.007Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:20.007Z DEBUG session state set to 56RTmAngs2dLq5rg0GbqKa4c8s6n0oy
2021-01-15T02:31:20.007Z DEBUG Login url param normalized to 'http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt'
2021-01-15T02:31:20.007Z DEBUG session requestedURL set to http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt
2021-01-15T02:31:20.007Z DEBUG saving session with failcount 1
2021-01-15T02:31:20.007Z DEBUG /login looking for callback_url matching
2021-01-15T02:31:20.007Z DEBUG /login callback_url set to http://vouch.taiheops.com:2081/auth
2021-01-15T02:31:20.007Z DEBUG redirecting to oauthURL https://ynfyvjwiaw.login.aliyunidaas.com/oauth/authorize?client_id=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&redirect_uri=http%3A%2F%2Fvouch.taiheops.com%3A2081%2Fauth&response_type=code&scope=read&state=56RTmAngs2dLq5rg0GbqKa4c8s6n0oy
2021-01-15T02:31:20.008Z INFO |200| 726.825µs /login {"statusCode": 200, "request": 3, "latency": "726.825µs", "avgLatency": "434.322µs", "ipPort": "172.17.0.1:37545", "method": "GET", "host": "vouch.taiheops.com", "path": "/login", "referer": ""}
2021-01-15T02:31:26.492Z INFO |200| 52.883µs /healthcheck {"statusCode": 200, "request": 4, "latency": "52.883µs", "avgLatency": "338.963µs", "ipPort": "127.0.0.1:41986", "method": "GET", "host": "0.0.0.0:9090", "path": "/healthcheck", "referer": ""}
2021-01-15T02:31:26.649Z DEBUG /login
2021-01-15T02:31:26.649Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:26.650Z DEBUG session state set to zkkIeiT1c3BcdYfBEyr4Htl2ZNERTPcX
2021-01-15T02:31:26.650Z INFO Stray param in login request ()
2021-01-15T02:31:26.650Z DEBUG Login url param normalized to '<nil>'
2021-01-15T02:31:26.650Z DEBUG Stray params in login url ([""]) will be ignored
2021-01-15T02:31:26.650Z ERROR no destination URL requested
2021-01-15T02:31:26.650Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:26.650Z DEBUG CaptureWriter.Write set w.StatusCode 400
2021-01-15T02:31:26.650Z DEBUG rendering error for user: 400 Bad Request
2021-01-15T02:31:26.650Z INFO |400| 497.451µs /login {"statusCode": 400, "request": 5, "latency": "497.451µs", "avgLatency": "370.66µs", "ipPort": "172.17.0.1:37553", "method": "GET", "host": "vouch.taiheops.com", "path": "/login", "referer": "http://vouch.taiheops.com:2081/login?url=http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt&vouch-failcount=&X-Vouch-Token=&error="}
2021-01-15T02:31:32.160Z DEBUG /logout
2021-01-15T02:31:32.161Z DEBUG tokenString length: 0
2021-01-15T02:31:32.161Z DEBUG Error reading gzip data: EOF
2021-01-15T02:31:32.161Z DEBUG decompressed tokenString length 0
2021-01-15T02:31:32.161Z ERROR token contains an invalid number of segments
2021-01-15T02:31:32.161Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:32.161Z DEBUG /logout deleting session
2021-01-15T02:31:32.161Z INFO |200| 493.573µs /logout {"statusCode": 200, "request": 6, "latency": "493.573µs", "avgLatency": "391.145µs", "ipPort": "172.17.0.1:37557", "method": "GET", "host": "vouch.taiheops.com", "path": "/logout", "referer": "http://vouch.taiheops.com:2081/login?url=http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt&vouch-failcount=&X-Vouch-Token=&error="}
2021-01-15T02:31:39.837Z DEBUG /login
2021-01-15T02:31:39.837Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:39.838Z DEBUG session state set to A2ImtVkhuWtIZEBxfuR4IA8ZqbImQqua
2021-01-15T02:31:39.838Z DEBUG Login url param normalized to 'http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt'
2021-01-15T02:31:39.838Z DEBUG session requestedURL set to http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt
2021-01-15T02:31:39.838Z DEBUG saving session with failcount 1
2021-01-15T02:31:39.838Z DEBUG /login looking for callback_url matching
2021-01-15T02:31:39.838Z DEBUG /login callback_url set to http://vouch.taiheops.com:2081/auth
2021-01-15T02:31:39.838Z DEBUG redirecting to oauthURL https://ynfyvjwiaw.login.aliyunidaas.com/oauth/authorize?client_id=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&redirect_uri=http%3A%2F%2Fvouch.taiheops.com%3A2081%2Fauth&response_type=code&scope=read&state=A2ImtVkhuWtIZEBxfuR4IA8ZqbImQqua
2021-01-15T02:31:39.838Z INFO |200| 343.675µs /login {"statusCode": 200, "request": 7, "latency": "343.675µs", "avgLatency": "384.364µs", "ipPort": "172.17.0.1:37563", "method": "GET", "host": "vouch.taiheops.com", "path": "/login", "referer": ""}
2021-01-15T02:31:41.380Z DEBUG /validate
2021-01-15T02:31:41.380Z ERROR no jwt found in request
2021-01-15T02:31:41.380Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:41.380Z DEBUG CaptureWriter.Write set w.StatusCode 401
2021-01-15T02:31:41.380Z INFO |401| 167.402µs /validate {"statusCode": 401, "request": 8, "latency": "167.402µs", "avgLatency": "357.244µs", "ipPort": "172.17.0.1:37571", "method": "GET", "host": "vouch.taiheops.com", "path": "/validate", "referer": "http://vouch.taiheops.com:2081/login?url=http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt&vouch-failcount=&X-Vouch-Token=&error="}
2021-01-15T02:31:46.507Z DEBUG /login
2021-01-15T02:31:46.507Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:46.508Z DEBUG session state set to XkDRS9bREFdxpdvGsYfGKtTsxPzEDO
2021-01-15T02:31:46.508Z DEBUG Login url param normalized to 'http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt'
2021-01-15T02:31:46.508Z DEBUG session requestedURL set to http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt
2021-01-15T02:31:46.508Z DEBUG failcount for http://test_sso_nginx_a.taiheops.com:2081/auth?code=KzaBeU&state=VtIrLMiJdepstkwuM6lYOgyGxfrs8jNt is 1
2021-01-15T02:31:46.508Z DEBUG saving session with failcount 2
2021-01-15T02:31:46.508Z DEBUG /login looking for callback_url matching
2021-01-15T02:31:46.508Z DEBUG /login callback_url set to http://vouch.taiheops.com:2081/auth
2021-01-15T02:31:46.508Z DEBUG redirecting to oauthURL https://ynfyvjwiaw.login.aliyunidaas.com/oauth/authorize?client_id=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&redirect_uri=http%3A%2F%2Fvouch.taiheops.com%3A2081%2Fauth&response_type=code&scope=read&state=XkDRS9bREFdxpdvGsYfGKtTsxPzEDO
2021-01-15T02:31:46.508Z INFO |200| 679.804µs /login {"statusCode": 200, "request": 9, "latency": "679.804µs", "avgLatency": "393.084µs", "ipPort": "172.17.0.1:37575", "method": "GET", "host": "vouch.taiheops.com", "path": "/login", "referer": ""}
2021-01-15T02:31:48.857Z DEBUG /auth
2021-01-15T02:31:48.969Z DEBUG id_token missing - may not be supported by this provider
2021-01-15T02:31:48.969Z DEBUG ptokens: accessToken length: 36, IdToken length: 0
2021-01-15T02:31:49.255Z INFO OpenID userinfo body: {"success":true,"code":"200","message":null,"requestId":"96C92102-8008-43C6-9248-CCF709C4ABB5","data":{"sub":"3884468577942292116","ou_id":"5711823617764658328","nickname":"xxxxxx","phone_number":null,"ou_name":"xxxxxxxxxxxxx","email":"[email protected]","username":"xxxxxxxxxxxxx"}}
2021-01-15T02:31:49.255Z DEBUG /auth Claims from userinfo: {Claims:map[]}
2021-01-15T02:31:49.255Z DEBUG verifyUser: Success! skipping verification, cfg.Cfg.AllowAllUsers is true
2021-01-15T02:31:49.255Z DEBUG token created, expires: 1610692309 diff from now: 14400
2021-01-15T02:31:49.257Z DEBUG token compressed: was 224 bytes, now 288
2021-01-15T02:31:49.257Z DEBUG setting the cookie domain to taiheops.com
2021-01-15T02:31:49.258Z INFO |200| 400.115404ms /auth {"statusCode": 200, "request": 10, "latency": "400.115404ms", "avgLatency": "40.365316ms", "ipPort": "172.17.0.1:37583", "method": "GET", "host": "vouch.taiheops.com", "path": "/auth", "referer": "http://vouch.taiheops.com:2081/"}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment