whs-authz-authn/caido-plugin-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

REFACTOR : findings를index가 아닌 모듈애서 만들도록 수정

Browse source
This commit is contained in:
KMINGON 2025-05-31 12:37:54 +09:00
commit f1b5ef5f9b
2 changed files with 40 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

4
packages/backend/src/index.ts
View file

@ -4,6 +4,7 @@ import type { Request, Response } from "caido:utils";
// import { AuthZCodeGrantController } from "./controller/authZCodeGrant";
import { CsrfCheck } from "./controller/csrfCheck";
import { PKCECheck } from "./controller/PKCECheck";
import { AccessTokenLeakController } from "./controller/accessTokenDetector";
export type API = DefineAPI<{}>;
@ -11,6 +12,7 @@ const csrfCheck = new CsrfCheck();
// const implicitGrantController = new ImplicitGrantController();
// const authZCodeGrantController = new AuthZCodeGrantController();
const pkceCheckController = new PKCECheck();
const tokenCheck = new AccessTokenLeakController();
export function init(sdk: SDK<API>) {
// sdk.events.onInterceptRequest(async (sdk, req: Request) => {
@ -30,6 +32,8 @@ export function init(sdk: SDK<API>) {
async (sdk: SDK<DefineAPI<{}>, {}>, req: Request, resp: Response) => {
await csrfCheck.checker(sdk, req, resp);
await pkceCheckController.test(sdk, req);
await tokenCheck.testReq(sdk, req);
await tokenCheck.testResp(sdk, resp, req);
// sdk.events.onInterceptRequest(async (sdk, req: Request) => {
// const result =
// authZCodeGrantController.testReq(req) ||