diff --git a/pkg/poc/frontend.go b/pkg/poc/frontend.go index 5cf90c9ab1d..a6d8aeda837 100644 --- a/pkg/poc/frontend.go +++ b/pkg/poc/frontend.go @@ -62,7 +62,8 @@ func (f *frontend) getRouter() chi.Router { // TODO(jonachang): remove this when go production. if f.enableMISE == true { miseToken := extractAuthBearerToken(r.Header) - miseError := authenticateWithMISE(r.Context(), miseToken) + method := r.Method + miseError := authenticateWithMISE(r.Context(), method, miseToken) if miseError != nil { f.logger.Infof("MISE error: %s", miseError) w.Write([]byte("****** Blocked by MISE authorization ******")) diff --git a/pkg/poc/miseAuthentication.go b/pkg/poc/miseAuthentication.go index be92cfd2fe9..f85ac18317a 100644 --- a/pkg/poc/miseAuthentication.go +++ b/pkg/poc/miseAuthentication.go @@ -21,12 +21,13 @@ const ( originURI = "https://server/endpoint" ) -func authenticateWithMISE(ctx context.Context, token string) error { +func authenticateWithMISE(ctx context.Context, requestMethod string, token string) error { requestData := MiseRequestData{ - MiseURL: miseURL, - OriginalURI: originURI, - Token: token, + MiseURL: miseURL, + OriginalURI: originURI, + OriginalMethod: requestMethod, + Token: token, } req, err := createMiseHTTPRequest(ctx, requestData) diff --git a/poc/pkg/values.yaml b/poc/pkg/values.yaml index 3c07d66f012..7c57386cb4f 100644 --- a/poc/pkg/values.yaml +++ b/poc/pkg/values.yaml @@ -120,18 +120,18 @@ MISE: TenantId: 72f988bf-86f1-41af-91ab-2d7cd011db47 Audience: https://management.azure.com # Possible log levels: Trace, Debug, Information, Warning, Error, Critical, None - LogLevel: Information + LogLevel: Debug InboundPolicies: Label: aro-rp-arm-policy AuthenticationSchemes: Bearer TokenTypes: AppToken - Authority: https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/ + Authority: https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/v2.0 ValidApplicationIds: "" Internal: Label: aro-rp-internal-policy AuthenticationSchemes: Bearer TokenTypes: AppToken - Authority: https://sts.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/ + Authority: https://login.microsoftonline.com/72f988bf-86f1-41af-91ab-2d7cd011db47/v2.0 ValidApplicationIds: "" AllowedHosts: "*" Kestrel: @@ -141,6 +141,6 @@ MISE: name: miseconfig Logging: LogLevel: - Default: Information - Microsoft: Information - Microsoft_Hosting_Lifetime: Information \ No newline at end of file + Default: Debug + Microsoft: Debug + Microsoft_Hosting_Lifetime: Debug \ No newline at end of file