Skip to content

Instantly share code, notes, and snippets.

@arkag
Created January 22, 2020 20:09
Show Gist options
  • Save arkag/f1bac7af5df4237e44296e526ecb37df to your computer and use it in GitHub Desktop.
Save arkag/f1bac7af5df4237e44296e526ecb37df to your computer and use it in GitHub Desktop.
2020-01-22T20:07:09.114Z INFO testing: true, using development console logger
2020-01-22T20:07:09.114Z DEBUG logLevel set to debug
2020-01-22T20:07:09.114Z WARN setting `vouch.cookie.maxage` to `vouch.jwt.maxage` value of 240 minutes (curently set to 14400 minutes)
2020-01-22T20:07:09.114Z INFO configuring oidc OAuth with Endpoint https://dev-number-admin.okta.com/oauth2/default/v1/authorize
2020-01-22T20:07:09.114Z DEBUG vouch.jwt.secret is 50 characters long
2020-01-22T20:07:09.114Z DEBUG vouch.session.key is 50 characters long
2020-01-22T20:07:09.114Z DEBUG checking availability of tcp port: 0.0.0.0:9090
2020-01-22T20:07:09.128Z DEBUG viper settings map[oauth:map[auth_url:https://dev-number-admin.okta.com/oauth2/default/v1/authorize callback_url:https://sub.domain.com/stats/auth client_id:0oa11gjiqk1m5kYHD4x6 client_secret:I_LY1Rt6UiG8m6Q6mWjHOQkh920fqn_GgAChgv52 provider:oidc scopes:[openid email] token_url:https://dev-number-admin.okta.com/oauth2/default/v1/token user_info_url:https://dev-number-admin.okta.com/oauth2/default/v1/userinfo] vouch:map[allowallusers:false cookie:map[httponly:true maxage:14400 name:VouchCookie secure:true] db:map[file:data/vouch_bolt.db] domains:[sub.domain.com] headers:map[claims:[groups given_name] jwt:X-Vouch-Token querystring:access_token redirect:X-Vouch-Requested-URI] jwt:map[compress:true issuer:Vouch maxage:240 secret:mGwbsK2MPnzyi8mCpQdCWpWwqoEy7DMYc5kjaAseihFVUJMn7Z] listen:0.0.0.0 loglevel:debug port:9090 session:map[key:mGwbsK2MPnzyi8mCpQdCWpWwqoEy7DMYc5kjaAseihFVUJMn7Z name:VouchSession] test_url:http://yourdomain.com testing:true whitelist:[[email protected] [email protected] [email protected]]]]
2020-01-22T20:07:09.128Z DEBUG opening dbfile /root/vouch-proxy-0.6.17/data/vouch_bolt.db
2020-01-22T20:07:09.129Z INFO starting Vouch {"version": "", "buildtime": "2020-01-22T17:18:36Z", "buildhost": "ip-192-168-200-237.us-west-1.compute.internal", "branch": "", "semver": "", "listen": "0.0.0.0:9090", "oauth.provider": "oidc"}
2020-01-22T20:07:09.129Z DEBUG serving static files from /root/vouch-proxy-0.6.17/static
2020-01-22T20:07:46.637Z DEBUG Request received : &{GET /validate HTTP/1.0 1 0 map[Accept:[text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9] Accept-Encoding:[gzip, deflate, br] Accept-Language:[en-US,en;q=0.9] Authorization:[Basic a2liYW5hYWRtaW46anppc2Nvb2whMQ==] Connection:[close] Cookie:[PHPSESSID=mt19ogbatbh8buk62rgpjemjd0] Dnt:[1] Sec-Fetch-Mode:[navigate] Sec-Fetch-Site:[none] Sec-Fetch-User:[?1] Upgrade-Insecure-Requests:[1] User-Agent:[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.131 Safari/537.36]] {} <nil> 0 [] true sub.domain.com map[] map[] <nil> map[] 127.0.0.1:56948 /validate <nil> <nil> <nil> 0xc00015c270}
2020-01-22T20:07:46.637Z DEBUG /validate
2020-01-22T20:07:46.638Z DEBUG jwt from authorization header: a2liYW5hYWRtaW46anppc2Nvb2whMQ==
2020-01-22T20:07:46.638Z DEBUG tokenString a2liYW5hYWRtaW46anppc2Nvb2whMQ==
2020-01-22T20:07:46.638Z DEBUG Error reading gzip data: gzip: invalid header
2020-01-22T20:07:46.638Z DEBUG decompressed tokenString
2020-01-22T20:07:46.638Z ERROR jwtParsed returned error, clearing cookie
2020-01-22T20:07:46.638Z ERROR token contains an invalid number of segments
2020-01-22T20:07:46.638Z DEBUG domain sub.domain.com matched array value at [0]=sub.domain.com
2020-01-22T20:07:46.638Z DEBUG CaptureWriter.Write set w.StatusCode 401
2020-01-22T20:07:46.638Z DEBUG Request handled successfully: 401
2020-01-22T20:07:46.638Z INFO |401| 132.791µs /validate {"statusCode": 401, "request": 1, "latency": "132.791µs", "avgLatency": "132.791µs", "ipPort": "127.0.0.1:56948", "method": "GET", "host": "sub.domain.com", "path": "/validate", "referer": ""}
2020-01-22T20:07:46.718Z DEBUG Request received : &{GET /login?url=https://sub.domain.com/stats/&vouch-failcount=&X-Vouch-Token=&error= HTTP/1.1 1 1 map[Accept:[text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9] Accept-Encoding:[gzip, deflate] Accept-Language:[en-US,en;q=0.9] Connection:[keep-alive] Cookie:[PHPSESSID=mt19ogbatbh8buk62rgpjemjd0] Dnt:[1] Upgrade-Insecure-Requests:[1] User-Agent:[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.131 Safari/537.36]] {} <nil> 0 [] false sub.domain.com:9090 map[] map[] <nil> map[] 65.127.112.131:62476 /login?url=https://sub.domain.com/stats/&vouch-failcount=&X-Vouch-Token=&error= <nil> <nil> <nil> 0xc00015c7b0}
2020-01-22T20:07:46.718Z DEBUG /login
2020-01-22T20:07:46.718Z DEBUG domain sub.domain.com:9090 matched array value at [0]=sub.domain.com
2020-01-22T20:07:46.718Z DEBUG session state set to 9B5F5w4y1EmlvxGKdLPOqqjkhcNadUp
2020-01-22T20:07:46.719Z DEBUG session requestedURL set to https://sub.domain.com/stats/
2020-01-22T20:07:46.719Z DEBUG saving session
2020-01-22T20:07:46.719Z DEBUG domain sub.domain.com:9090 matched array value at [0]=sub.domain.com
2020-01-22T20:07:46.719Z DEBUG looking for redirect URL matching sub.domain.com
2020-01-22T20:07:46.719Z DEBUG redirecting to oauthURL https://dev-number-admin.okta.com/oauth2/default/v1/authorize?client_id=0oa11gjiqk1m5kYHD4x6&redirect_uri=https%3A%2F%2Fsub.domain.com%2Fstats%2Fauth&response_type=code&scope=openid+email&state=9B5F5w4y1EmlvxGKdLPOqqjkhcNadUp
2020-01-22T20:07:46.719Z DEBUG CaptureWriter.Write set w.StatusCode 200
2020-01-22T20:07:46.719Z DEBUG Request handled successfully: 200
2020-01-22T20:07:46.719Z INFO |200| 683.602µs /login {"statusCode": 200, "request": 2, "latency": "683.602µs", "avgLatency": "408.196µs", "ipPort": "65.127.112.131:62476", "method": "GET", "host": "sub.domain.com:9090", "path": "/login", "referer": ""}
2020-01-22T20:07:46.836Z DEBUG Request received : &{GET /login?url=https://sub.domain.com/stats/&vouch-failcount=&X-Vouch-Token=&error= HTTP/1.1 1 1 map[Accept:[text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9] Accept-Encoding:[gzip, deflate] Accept-Language:[en-US,en;q=0.9] Cache-Control:[max-age=0] Connection:[keep-alive] Cookie:[PHPSESSID=mt19ogbatbh8buk62rgpjemjd0] Dnt:[1] Upgrade-Insecure-Requests:[1] User-Agent:[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.131 Safari/537.36]] {} <nil> 0 [] false sub.domain.com:9090 map[] map[] <nil> map[] 65.127.112.131:58133 /login?url=https://sub.domain.com/stats/&vouch-failcount=&X-Vouch-Token=&error= <nil> <nil> <nil> 0xc00015db30}
2020-01-22T20:07:46.836Z DEBUG /login
2020-01-22T20:07:46.836Z DEBUG domain sub.domain.com:9090 matched array value at [0]=sub.domain.com
2020-01-22T20:07:46.836Z DEBUG session state set to 1orn4QY7FOYf6LJz5hybQYo0OumYCTt
2020-01-22T20:07:46.836Z DEBUG session requestedURL set to https://sub.domain.com/stats/
2020-01-22T20:07:46.836Z DEBUG saving session
2020-01-22T20:07:46.836Z DEBUG domain sub.domain.com:9090 matched array value at [0]=sub.domain.com
2020-01-22T20:07:46.836Z DEBUG looking for redirect URL matching sub.domain.com
2020-01-22T20:07:46.836Z DEBUG redirecting to oauthURL https://dev-number-admin.okta.com/oauth2/default/v1/authorize?client_id=0oa11gjiqk1m5kYHD4x6&redirect_uri=https%3A%2F%2Fsub.domain.com%2Fstats%2Fauth&response_type=code&scope=openid+email&state=1orn4QY7FOYf6LJz5hybQYo0OumYCTt
2020-01-22T20:07:46.836Z DEBUG CaptureWriter.Write set w.StatusCode 200
2020-01-22T20:07:46.836Z DEBUG Request handled successfully: 200
2020-01-22T20:07:46.836Z INFO |200| 295.202µs /login {"statusCode": 200, "request": 3, "latency": "295.202µs", "avgLatency": "370.532µs", "ipPort": "65.127.112.131:58133", "method": "GET", "host": "sub.domain.com:9090", "path": "/login", "referer": ""}
2020-01-22T20:07:51.915Z DEBUG Request received : &{GET /login?url=https://sub.domain.com/stats/&vouch-failcount=&X-Vouch-Token=&error= HTTP/1.1 1 1 map[Accept:[text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9] Accept-Encoding:[gzip, deflate] Accept-Language:[en-US,en;q=0.9] Cache-Control:[max-age=0] Connection:[keep-alive] Cookie:[PHPSESSID=mt19ogbatbh8buk62rgpjemjd0] Dnt:[1] Upgrade-Insecure-Requests:[1] User-Agent:[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.131 Safari/537.36]] {} <nil> 0 [] false sub.domain.com:9090 map[] map[] <nil> map[] 65.127.112.131:41114 /login?url=https://sub.domain.com/stats/&vouch-failcount=&X-Vouch-Token=&error= <nil> <nil> <nil> 0xc0001d64e0}
2020-01-22T20:07:51.915Z DEBUG /login
2020-01-22T20:07:51.915Z DEBUG domain sub.domain.com:9090 matched array value at [0]=sub.domain.com
2020-01-22T20:07:51.915Z DEBUG session state set to N23fTKgckbnDRSG7shWGzrHyKtKtrPM
2020-01-22T20:07:51.915Z DEBUG session requestedURL set to https://sub.domain.com/stats/
2020-01-22T20:07:51.915Z DEBUG saving session
2020-01-22T20:07:51.915Z DEBUG domain sub.domain.com:9090 matched array value at [0]=sub.domain.com
2020-01-22T20:07:51.915Z DEBUG looking for redirect URL matching sub.domain.com
2020-01-22T20:07:51.915Z DEBUG redirecting to oauthURL https://dev-number-admin.okta.com/oauth2/default/v1/authorize?client_id=0oa11gjiqk1m5kYHD4x6&redirect_uri=https%3A%2F%2Fsub.domain.com%2Fstats%2Fauth&response_type=code&scope=openid+email&state=N23fTKgckbnDRSG7shWGzrHyKtKtrPM
2020-01-22T20:07:51.915Z DEBUG CaptureWriter.Write set w.StatusCode 200
2020-01-22T20:07:51.915Z DEBUG Request handled successfully: 200
2020-01-22T20:07:51.915Z INFO |200| 333.534µs /login {"statusCode": 200, "request": 4, "latency": "333.534µs", "avgLatency": "361.283µs", "ipPort": "65.127.112.131:41114", "method": "GET", "host": "sub.domain.com:9090", "path": "/login", "referer": ""}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment