cyonjan/frp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Retry retrieving an access token with exponential backoff

Browse Source 
When the OIDC provider is unavailable when a new token is requested, the client
is stuck for an indefinite state. This is only resolved by restarting the client or
the server.

With this feature, we want to achieve a scenario where a token is requested for a
set amount of retries when the OIDC provider is not available.
This commit is contained in:
Rob Kenis 2023-10-24 16:57:53 +02:00
parent a6478aeac8
commit 96c5dbd992
1 changed files with 21 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
pkg/auth/oidc.go
View File

@ -17,6 +17,7 @@ package auth
import (
"context"
"fmt"
"time"
"github.com/coreos/go-oidc/v3/oidc"
"github.com/samber/lo"
@ -56,12 +57,27 @@ func NewOidcAuthSetter(additionalAuthScopes []v1.AuthScope, cfg v1.AuthOIDCClien
}
}
func (auth *OidcAuthProvider) generateAccessToken() (accessToken string, err error) {
tokenObj, err := auth.tokenGenerator.Token(context.Background())
if err != nil {
return "", fmt.Errorf("couldn't generate OIDC token for login: %v", err)
func withRetries(retries int, fn func() (accessToken string, error error)) (accessToken string, err error) {
exponentialBackOff := time.Second * 1
for i := 0; i < retries; i++ {
accessToken, err = fn()
if err == nil {
return accessToken, nil
}
time.Sleep(exponentialBackOff)
exponentialBackOff *= 2
}
return tokenObj.AccessToken, nil
return "", err
}
func (auth *OidcAuthProvider) generateAccessToken() (accessToken string, err error) {
return withRetries(10, func() (accessToken string, error error) {
tokenObj, err := auth.tokenGenerator.Token(context.Background())
if err != nil {
return "", fmt.Errorf("couldn't generate OIDC token for login: %v", err)
}
return tokenObj.AccessToken, nil
})
}
func (auth *OidcAuthProvider) SetLogin(loginMsg *msg.Login) (err error) {