Setting created_by/updated_by via header

pkg/config/env.go

@@ -184,6 +184,10 @@ var Config = struct {
 	// "HS256" and "RS256" supported
 	JWTAuthSigningMethod string `env:"FLAGR_JWT_AUTH_SIGNING_METHOD" envDefault:"HS256"`
 
+	// auth proxy in front of flagr to identify user
+	AuthProxyEnabled           bool     `env:"FLAGR_AUTH_PROXY_ENABLED" envDefault:"false"`
+	AuthProxyHeader            string   `env:"FLAGR_AUTH_PROXY_HEADER" envDefault:"X-Email"`
+
 	// WebPrefix - base path for web and API
 	// e.g. FLAGR_WEB_PREFIX=/foo
 	// UI path  => localhost:18000/foo"

pkg/handler/subject.go

@@ -0,0 +1,32 @@
+package handler
+
+import (
+	"net/http"
+
+	"github.com/checkr/flagr/pkg/config"
+	"github.com/checkr/flagr/pkg/util"
+
+	jwt "github.com/dgrijalva/jwt-go"
+)
+
+func getSubjectFromRequest(r *http.Request) string {
+	if r == nil {
+		return ""
+	}
+
+	if config.Config.JWTAuthEnabled {
+		token, ok := r.Context().Value(config.Config.JWTAuthUserProperty).(*jwt.Token)
+		if !ok {
+			return ""
+		}
+
+		if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
+			return util.SafeString(claims[config.Config.JWTAuthUserClaim])
+		}
+
+		} else if config.Config.AuthProxyEnabled {
+			return r.Header.Get(config.Config.AuthProxyHeader)
+		}
+
+	return ""
+}

pkg/handler/jwt_test.go → pkg/handler/subject_test.go

@@ -1,3 +1,4 @@
+
 package handler
 
 import (
@@ -10,9 +11,11 @@ import (
 	"github.com/stretchr/testify/assert"
 )
 
-func TestGetSubjectFromRequest(t *testing.T) {
+func TestGetSubjectFromJWT(t *testing.T) {
 	var ctx context.Context
 
+	config.Config.JWTAuthEnabled = true
+
 	r, _ := http.NewRequest("GET", "", nil)
 	assert.Equal(t, getSubjectFromRequest(r), "")
 
@@ -30,3 +33,16 @@ func TestGetSubjectFromRequest(t *testing.T) {
 	})
 	assert.Equal(t, getSubjectFromRequest(r.WithContext(ctx)), "[email protected]")
 }
+
+func TestGetSubjectFromOauthProxy(t *testing.T) {
+	var ctx = context.Background()
+
+	config.Config.JWTAuthEnabled = false
+	config.Config.AuthProxyEnabled = true
+
+	r, _ := http.NewRequest("GET", "", nil)
+	assert.Equal(t, getSubjectFromRequest(r), "")
+
+	r.Header.Set("X-Email", "[email protected]")
+	assert.Equal(t, getSubjectFromRequest(r.WithContext(ctx)), "[email protected]")
+}