whs-authz-authn/caido-plugin-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[Update] index

Browse source
This commit is contained in:
tv0924@icloud.com 2025-05-31 11:47:52 +09:00
commit 5fed2eb7d0
2 changed files with 15 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

BIN
dist/plugin_package.zip vendored
View file

Binary file not shown.

29
packages/backend/src/index.ts
View file

@ -8,8 +8,8 @@ import { PKCECheck } from "./controller/PKCECheck";
export type API = DefineAPI<{}>; export type API = DefineAPI<{}>;
const csrfCheck = new CsrfCheck(); const csrfCheck = new CsrfCheck();
const implicitGrantController = new ImplicitGrantController(); // const implicitGrantController = new ImplicitGrantController();
const authZCodeGrantController = new AuthZCodeGrantController(); // const authZCodeGrantController = new AuthZCodeGrantController();
const pkceCheckController = new PKCECheck(); const pkceCheckController = new PKCECheck();
export function init(sdk: SDK<API>) { export function init(sdk: SDK<API>) {
@ -29,20 +29,21 @@ export function init(sdk: SDK<API>) {
sdk.events.onInterceptResponse( sdk.events.onInterceptResponse(
async (sdk: SDK<DefineAPI<{}>, {}>, req: Request, resp: Response) => { async (sdk: SDK<DefineAPI<{}>, {}>, req: Request, resp: Response) => {
await csrfCheck.checker(sdk, req, resp); await csrfCheck.checker(sdk, req, resp);
sdk.events.onInterceptRequest(async (sdk, req: Request) => {
const result =
authZCodeGrantController.testReq(req) ||
implicitGrantController.testReq(req);
if (result) {
await pkceCheckController.test(sdk, req); await pkceCheckController.test(sdk, req);
// sdk.events.onInterceptRequest(async (sdk, req: Request) => {
// const result =
// authZCodeGrantController.testReq(req) ||
// implicitGrantController.testReq(req);
await sdk.findings.create({ // if (result) {
title: "Possible SSO Request Detected", // await pkceCheckController.test(sdk, req);
description: `SSO-related parameters detected in request:\n\n${req.getMethod()} ${req.getUrl()} : ${result}`,
request: req, // await sdk.findings.create({
reporter: "", // title: "Possible SSO Request Detected",
}); // description: `SSO-related parameters detected in request:\n\n${req.getMethod()} ${req.getUrl()} : ${result}`,
// request: req,
// reporter: "",
// });
} }
); );
} }