diff --git a/Dockerfile b/Dockerfile new file mode 100755 index 0000000000000000000000000000000000000000..d551344074f19d7f54527bc227dceaa86ee415c0 --- /dev/null +++ b/Dockerfile @@ -0,0 +1,22 @@ +# syntax=docker/dockerfile:1 + + +FROM golang:latest + +WORKDIR /app + +COPY go.mod ./ +COPY go.sum ./ + + +RUN go mod download +RUN go get github.com/gin-gonic/gin/binding@v1.8.1 + +COPY *.go ./ + +RUN go build -o /hepia/appsec + +EXPOSE 8080 + +CMD [ "/hepia/appsec" ] + diff --git a/certs/cert.pem b/certs/cert.pem new file mode 100755 index 0000000000000000000000000000000000000000..6eda0eeec206c46f1cfd1e076a64bd450c84fe13 --- /dev/null +++ b/certs/cert.pem @@ -0,0 +1,32 @@ +-----BEGIN CERTIFICATE----- +MIIFhTCCA22gAwIBAgIUKkhtWL8K3GccgYHdZxiHWpOaNI0wDQYJKoZIhvcNAQEL +BQAwUjELMAkGA1UEBhMCQ0gxDzANBgNVBAgMBkdlbmV2YTEPMA0GA1UEBwwGR2Vu +ZXZhMSEwHwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMjIxMTEw +MTcxNDI2WhcNMjMxMTEwMTcxNDI2WjBSMQswCQYDVQQGEwJDSDEPMA0GA1UECAwG +R2VuZXZhMQ8wDQYDVQQHDAZHZW5ldmExITAfBgNVBAoMGEludGVybmV0IFdpZGdp +dHMgUHR5IEx0ZDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMAcyvql +UnMTffWaL64HPAW3l2rX9Dj1ELCuO97xwtC2xG5duqVjO/EwT9S4ZpSMLmipQ+e1 +un0GD48mw1TLvT+98HUTAswnBTmDqrU8tJIMCGlXfvz9sYG5BslSatt3Ekz6Ks6H +m+1Lsgyel1iPMAZj91TuxZCkILliwVaTR89gNllHlHhhPZgVTzzvMqPZHFrK4D52 +pC+hz4JHhKqYT4g9vTc1qhDuvgKPyCtS9KiuVHWL7DsERR8rJRnS82rBfYnozFwv +UT+5YX/OqDVnYHfTff3TaDOsboY5BfY1mkpcszG46qtUHKyogSkyT2oj05dRlTnX +AHrmT9yB2s/RAEYBr6qpuib+UNKZXNrPEjVXFW27uU9NeXGepfbrC4SlOicfYl3c +mqHnLJh+qnS7B0ttnGoPzkwrSGfMVIx84ug7Rz8wOk3k00qm9Lfh/++iEDK/a/+j +Nz58jbAj3cWavAbNSLX9DHU39N7lObFlpNyW3joV6jzEJnXuHoKWEeUcFgADIgwL +P5sOwqcRcBKPhA4wC+PDVb+mF1r8riuvihkdX8MowdEZsrsZqTcNLiIJxdQHp0dO +Nub3ICv2CqRND87Co6Y3WLolU2IAp+WGLG+tneAPrSgWaIMmyjSFisXSZSg3a6om +CPKTnuh0JBdxEpXYcG9QW/Sfy6By9TgKMfrZAgMBAAGjUzBRMB0GA1UdDgQWBBSW +azBRyw6GIXKRVc3zpGB3vgLZqjAfBgNVHSMEGDAWgBSWazBRyw6GIXKRVc3zpGB3 +vgLZqjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQChmrriaoYM +YdEnCoIwQ8+8qwJOVGad2zd+/mMyTQUftbMDrPI69oVbJlP+eIgZAepMWKYv9G5p +fRWmog9yDI4hqFIlbUjTSi+FsnCMnDucTExpDFqA3LDfGSlS6wc8nFvZlueyEJCZ +PrpEC/cDJC7g0HDNmYSJoPsUCRNgG7lpQa/fa+tb26ZGOfI5/bTongqDXjJfoYBW +UO38ZpWji/JDk8pWzFfhWS1MfMamKzJIHEKx773SZqCcJsTljHBWpFW+SI0UIoii +ed95cJFk5rZStoNolRJAdUEttDRn63RuKznGywGadX03VXvP6DXfLLQHC1J7Tbpj +CCbPwT+bVcZYi5JXILCtGA3WEJeRIGdeBjKIGoSbl8LbK6Omf3iG2GLIULt0CqRh +rutt8ipQfQbepsBPPDYLdq3dJbIF9cDHAuAH+YfrXuc7rOln0/jXkvLVHzWIxdDc +M2ZIuA/C1ZReMVl4KfwqpkWXGuBnUdPk4Myo6jDyIg9NUa8S6oaW+oos3dktcmSn +KJ7BdoKt9fVLWPFcjPvQ3wn8ZWFa6ycJ5n3PibOMX08Us2E8Fu6xEZbAZPfcLFlr +6wuASSI3Jp96Xg9JAglrW0xt8kr80s1i2w6VuE737rBO/gSnjMuEsYxveUhwqB7E +kBDxgiUzIvW8rMJhciggF8QeM4jaq1k5Zg== +-----END CERTIFICATE----- diff --git a/certs/key.pem b/certs/key.pem new file mode 100755 index 0000000000000000000000000000000000000000..83097eec111a0aad5cbec590e46f043da406c7cd --- /dev/null +++ b/certs/key.pem @@ -0,0 +1,52 @@ +-----BEGIN PRIVATE KEY----- +MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDAHMr6pVJzE331 +mi+uBzwFt5dq1/Q49RCwrjve8cLQtsRuXbqlYzvxME/UuGaUjC5oqUPntbp9Bg+P +JsNUy70/vfB1EwLMJwU5g6q1PLSSDAhpV378/bGBuQbJUmrbdxJM+irOh5vtS7IM +npdYjzAGY/dU7sWQpCC5YsFWk0fPYDZZR5R4YT2YFU887zKj2RxayuA+dqQvoc+C +R4SqmE+IPb03NaoQ7r4Cj8grUvSorlR1i+w7BEUfKyUZ0vNqwX2J6MxcL1E/uWF/ +zqg1Z2B3033902gzrG6GOQX2NZpKXLMxuOqrVBysqIEpMk9qI9OXUZU51wB65k/c +gdrP0QBGAa+qqbom/lDSmVzazxI1VxVtu7lPTXlxnqX26wuEpTonH2Jd3Jqh5yyY +fqp0uwdLbZxqD85MK0hnzFSMfOLoO0c/MDpN5NNKpvS34f/vohAyv2v/ozc+fI2w +I93FmrwGzUi1/Qx1N/Te5TmxZaTclt46Feo8xCZ17h6ClhHlHBYAAyIMCz+bDsKn +EXASj4QOMAvjw1W/phda/K4rr4oZHV/DKMHRGbK7Gak3DS4iCcXUB6dHTjbm9yAr +9gqkTQ/OwqOmN1i6JVNiAKflhixvrZ3gD60oFmiDJso0hYrF0mUoN2uqJgjyk57o +dCQXcRKV2HBvUFv0n8ugcvU4CjH62QIDAQABAoICAG+CRu8ldq4E6l/cl0BUQqqu +3dzObJuC46Up/OZzPbkX3PySuvu0ld5xRGUcg65Fj8qANUIRYaWgFvfocAiQGdEd +1qyd1EnbfFTd8AAytDzxbxB2EOeX+ahqVV4V0KCChMTZkG9Al2ktPrPEeeSVeDK9 +Y5qQ3WwPWE9C2yX9Zvkfx2wa+DrHdpEIDW45CRPBuYuZpn+bLcHYEjJ0gLTko4VZ +ELMzGvupF/E0s+Mxy4D9b1irVvsKh3SH/oj2wQN+O/gIgFYhwO9UExu0QD5/OqdS +wxbJ1vnnZF/USXmXs27mT7zUsKGxuNMfG5ll8mKRWQfD+vIPsd+kP0amuPNXROhc +BU355+vBur7BjP/bQ9RxGQkJVqnxDZoesVynSPakHUcgKYxtXDp5KNbrkQ2ME8jS +0925pSKUNlPmRTL7CNP+wL1fNTFSkQAojJLhm06xSJoQeZDM1vRzCY+8OOwmNFaT +UfT6wdOQ11+zvBMDBhvpBoYbqAZvzH4uWzNWMiIlFwcxfkJE/A5+COS5kQ9J/Rxk +MHEIweIoEYRN+D95no6QP4urlBuCZaS1L2Aim+NHCWrSLF0CQ5o4tqqonbNTNL44 +Hc/looUX/RS6uZmoR9Bw1HncALL353+xG3M+sFCa9HCR3nY1rbS2hpHDFbbPvkCE +tFN1IGUVhddJGnJ/SI9hAoIBAQDl3Wn8CrdOEG8clJGberCv9SXfmbwZLshLDtG2 +tvw6G64jO9CmS7+0oCkponVy7BixIcq+77DT6Io1Mwq1vce1tRIF7NaE795wheVT +TRaKH2quawoACEJMUrhmRvE3A7km2f0r/gpxIamr60ro5d6OIwNxqKcCp8Wnb5HM +Tf37PkhMSVaq02hP5YXHuLw/B0P8aqzlcVftjs1Jnx35MYpX0LlGauQHEg9XDeuq +Y8FN0fhXiUZB6p2KVIsPNfQkiXIteyWU8kAkp6VL/fTWc2dm1NCUT0rM+EwC4WEc +ID6SmYPr0mCzg6F7NRz3obmUW8Tj/3rgVjtJ5R2kzTdNl4zDAoIBAQDV9Ii4Fxcd +H0ZizqEeCCY91fhFbr+tKUKuqTZf2O9E0FTuQX5cNKpijMHj3SJ1DVQt1JT+6KVm +Y6ItEABLuPkPsAdfC/EaoxFgnC9VKG2n2r0823rKKfgw48kGKJEZCxL4DCR2BjDv +xqj0bAUL5Nj/1OZogi00GK3Vj28VNZtGk0K4epMBkj0DuhAY2Jpz7+gSs8DYfR/H +sOcS97R9c8xsoYhUJ5vJj8WVWuwURH8v1Zayfddi+SFyti2jo3QfbP6MdpFNDPq2 +adyGe2UEj8mayyReK1FAAAUDUPkjS4W4QEj/URbrXGI9wTnX4D9aZFWlUgz6XDoT +jWBo7dVirFAzAoIBAQDTHijZdH4nFLD4bvvM8UKWWXIPjANWncEYLuQuDKJcPFAT +zDw2gBvyqacktjFo+68yAPdVpo+iEVHeyqJriYKDQWrsRjpAno6Oimu1tnedJH22 +9Fia7vr1XoQ+a6nf/WtwY4ZDgW/VuDU90T1b6sQdh8sB+QRrS+wdfDtMidVbjDia +2EDhZInJ1+SnKuS6ftHSY6eolBFN/npNw/ajiPym6u0/36zPUacFLaPlOvmvn8mX +nF0K7ZEEG+IcdlFlvVdArno18sk24ULQKM9Wp2ew6oUnsivhVat6ecXXL0ZJHvYr +AW4PcjY+EuooBkGMIT0UqvEQWiLaG7S+SD0i5q5BAoIBAQCX7vWjnKoKQSpPgiJB +3FGjua17SOEOi21R8NGvELMgr7yQEKw1uCSCpSgOsvsEGjn77aj8t6K06e3BiEpd +e3ZKIJurcCR/4Oq3K1Ila/cqqpeVftpcc59OwIMBP4+CNC39PUorEcxwiSdzor2W +q6U5TytrbX3CMABJ1nhwnEeuv2Yy8MAx7nIrklZZ/n7385ZeqY05bulBeistef+O +0suJHNBdyl7DrLgHjrB02AtloYxJJjnsi7On7RzNxoXwxwqgHpaiG6RyIwy55yhe +K+ljZfxmbuZcx2bH6xlwafIEXIo53JClBE6zQeLcnN8ARp3XL0QOCa4oMk4TVUkh +r/GnAoIBABujgLzVa45akeWupFfVay9LxBMTJej1dybuF6cpQ8u3ZU/Ywc0pFYou +HMsKGumbqeXA63D2dwK2erkD2NDv+0dtLo7HPYHIToutWrQg23j3CfmT7JukMX1u +ivDrMsrf8e+fLo3I96j9Qj+jvkW+C3KC+VVFZwFjlMjr6Emfdwb6yfJVLjuxQ1EP +39rCf26VDsHfzbz/C3RBfKzflmotiQymXgKtah81H7xObnXV1z+3WeatcK5GsJBc +C0odynFe1uccXqy8j7x7p7qA3KzOuXyYoSYSuBDUwctLVF4j9X7YDdcocleZn/9C +NsBsyQW8fuL1RmTBHohEg93ELnkZErc= +-----END PRIVATE KEY----- diff --git "a/doc/Rapport S\303\251curit\303\251 des Applications.pdf" "b/doc/Rapport S\303\251curit\303\251 des Applications.pdf" new file mode 100644 index 0000000000000000000000000000000000000000..59917ee5679a21b4043ef5511447ffc177b32583 Binary files /dev/null and "b/doc/Rapport S\303\251curit\303\251 des Applications.pdf" differ diff --git a/docker-compose.yml b/docker-compose.yml new file mode 100755 index 0000000000000000000000000000000000000000..46f5cf4d0996dfab455b8a904fa521b30ab26e92 --- /dev/null +++ b/docker-compose.yml @@ -0,0 +1,19 @@ +version: '3' +services: + nginx: + image: nginx:latest + container_name: nginx + volumes: + - ./nginx.conf:/etc/nginx/nginx.conf + - ./certs:/etc/certs + ports: + - 80:80 + - 443:443 + + appsec: + image: appsec:latest + env_file: + - "var.env" + container_name: appsec + expose: + - "8080" \ No newline at end of file diff --git a/file.sh b/file.sh new file mode 100644 index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 diff --git a/go.mod b/go.mod new file mode 100755 index 0000000000000000000000000000000000000000..d995de322175a252b8ca94ba3a4018641975629d --- /dev/null +++ b/go.mod @@ -0,0 +1,38 @@ +module appSec/myApp + +go 1.19 + +require ( + github.com/gin-gonic/gin v1.8.1 + github.com/okta/okta-jwt-verifier-golang v1.3.1 +) + +require ( + github.com/decred/dcrd/dcrec/secp256k1/v4 v4.1.0 // indirect + github.com/gin-contrib/sse v0.1.0 // indirect + github.com/go-playground/locales v0.14.0 // indirect + github.com/go-playground/universal-translator v0.18.0 // indirect + github.com/go-playground/validator/v10 v10.10.0 // indirect + github.com/goccy/go-json v0.10.0 // indirect + github.com/json-iterator/go v1.1.12 // indirect + github.com/leodido/go-urn v1.2.1 // indirect + github.com/lestrrat-go/backoff/v2 v2.0.8 // indirect + github.com/lestrrat-go/blackmagic v1.0.1 // indirect + github.com/lestrrat-go/httpcc v1.0.1 // indirect + github.com/lestrrat-go/iter v1.0.2 // indirect + github.com/lestrrat-go/jwx v1.2.25 // indirect + github.com/lestrrat-go/option v1.0.1 // indirect + github.com/mattn/go-isatty v0.0.14 // indirect + github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 // indirect + github.com/modern-go/reflect2 v1.0.2 // indirect + github.com/patrickmn/go-cache v0.0.0-20180815053127-5633e0862627 // indirect + github.com/pelletier/go-toml/v2 v2.0.1 // indirect + github.com/pkg/errors v0.9.1 // indirect + github.com/ugorji/go/codec v1.2.7 // indirect + golang.org/x/crypto v0.5.0 // indirect + golang.org/x/net v0.5.0 // indirect + golang.org/x/sys v0.4.0 // indirect + golang.org/x/text v0.6.0 // indirect + google.golang.org/protobuf v1.28.0 // indirect + gopkg.in/yaml.v2 v2.4.0 // indirect +) diff --git a/go.sum b/go.sum new file mode 100755 index 0000000000000000000000000000000000000000..b6608d3eade2a9b571f70cd94c40e92c6b2509e9 --- /dev/null +++ b/go.sum @@ -0,0 +1,148 @@ +github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= +github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/decred/dcrd/crypto/blake256 v1.0.0/go.mod h1:sQl2p6Y26YV+ZOcSTP6thNdn47hh8kt6rqSlvmrXFAc= +github.com/decred/dcrd/dcrec/secp256k1/v4 v4.0.0-20210816181553-5444fa50b93d/go.mod h1:tmAIfUFEirG/Y8jhZ9M+h36obRZAk/1fcSpXwAVlfqE= +github.com/decred/dcrd/dcrec/secp256k1/v4 v4.1.0 h1:HbphB4TFFXpv7MNrT52FGrrgVXF1owhMVTHFZIlnvd4= +github.com/decred/dcrd/dcrec/secp256k1/v4 v4.1.0/go.mod h1:DZGJHZMqrU4JJqFAWUS2UO1+lbSKsdiOoYi9Zzey7Fc= +github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE= +github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI= +github.com/gin-gonic/gin v1.8.1 h1:4+fr/el88TOO3ewCmQr8cx/CtZ/umlIRIs5M4NTNjf8= +github.com/gin-gonic/gin v1.8.1/go.mod h1:ji8BvRH1azfM+SYow9zQ6SZMvR8qOMZHmsCuWR9tTTk= +github.com/go-playground/assert/v2 v2.0.1/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4= +github.com/go-playground/locales v0.14.0 h1:u50s323jtVGugKlcYeyzC0etD1HifMjqmJqb8WugfUU= +github.com/go-playground/locales v0.14.0/go.mod h1:sawfccIbzZTqEDETgFXqTho0QybSa7l++s0DH+LDiLs= +github.com/go-playground/universal-translator v0.18.0 h1:82dyy6p4OuJq4/CByFNOn/jYrnRPArHwAcmLoJZxyho= +github.com/go-playground/universal-translator v0.18.0/go.mod h1:UvRDBj+xPUEGrFYl+lu/H90nyDXpg0fqeB/AQUGNTVA= +github.com/go-playground/validator/v10 v10.10.0 h1:I7mrTYv78z8k8VXa/qJlOlEXn/nBh+BF8dHX5nt/dr0= +github.com/go-playground/validator/v10 v10.10.0/go.mod h1:74x4gJWsvQexRdW8Pn3dXSGrTK4nAUsbPlLADvpJkos= +github.com/goccy/go-json v0.9.4/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I= +github.com/goccy/go-json v0.9.7 h1:IcB+Aqpx/iMHu5Yooh7jEzJk1JZ7Pjtmys2ukPr7EeM= +github.com/goccy/go-json v0.9.7/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I= +github.com/goccy/go-json v0.10.0 h1:mXKd9Qw4NuzShiRlOXKews24ufknHO7gx30lsDyokKA= +github.com/goccy/go-json v0.10.0/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I= +github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= +github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg= +github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM= +github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo= +github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= +github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI= +github.com/kr/pretty v0.3.0/go.mod h1:640gp4NfQd8pI5XOwp5fnNeVWj67G7CFk/SaSQn7NBk= +github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= +github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= +github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= +github.com/leodido/go-urn v1.2.1 h1:BqpAaACuzVSgi/VLzGZIobT2z4v53pjosyNd9Yv6n/w= +github.com/leodido/go-urn v1.2.1/go.mod h1:zt4jvISO2HfUBqxjfIshjdMTYS56ZS/qv49ictyFfxY= +github.com/lestrrat-go/backoff/v2 v2.0.8 h1:oNb5E5isby2kiro9AgdHLv5N5tint1AnDVVf2E2un5A= +github.com/lestrrat-go/backoff/v2 v2.0.8/go.mod h1:rHP/q/r9aT27n24JQLa7JhSQZCKBBOiM/uP402WwN8Y= +github.com/lestrrat-go/blackmagic v1.0.0/go.mod h1:TNgH//0vYSs8VXDCfkZLgIrVTTXQELZffUV0tz3MtdQ= +github.com/lestrrat-go/blackmagic v1.0.1 h1:lS5Zts+5HIC/8og6cGHb0uCcNCa3OUt1ygh3Qz2Fe80= +github.com/lestrrat-go/blackmagic v1.0.1/go.mod h1:UrEqBzIR2U6CnzVyUtfM6oZNMt/7O7Vohk2J0OGSAtU= +github.com/lestrrat-go/codegen v1.0.0/go.mod h1:JhJw6OQAuPEfVKUCLItpaVLumDGWQznd1VaXrBk9TdM= +github.com/lestrrat-go/httpcc v1.0.0/go.mod h1:tGS/u00Vh5N6FHNkExqGGNId8e0Big+++0Gf8MBnAvE= +github.com/lestrrat-go/httpcc v1.0.1 h1:ydWCStUeJLkpYyjLDHihupbn2tYmZ7m22BGkcvZZrIE= +github.com/lestrrat-go/httpcc v1.0.1/go.mod h1:qiltp3Mt56+55GPVCbTdM9MlqhvzyuL6W/NMDA8vA5E= +github.com/lestrrat-go/iter v1.0.1/go.mod h1:zIdgO1mRKhn8l9vrZJZz9TUMMFbQbLeTsbqPDrJ/OJc= +github.com/lestrrat-go/iter v1.0.2 h1:gMXo1q4c2pHmC3dn8LzRhJfP1ceCbgSiT9lUydIzltI= +github.com/lestrrat-go/iter v1.0.2/go.mod h1:Momfcq3AnRlRjI5b5O8/G5/BvpzrhoFTZcn06fEOPt4= +github.com/lestrrat-go/jwx v1.2.18/go.mod h1:bWTBO7IHHVMtNunM8so9MT8wD+euEY1PzGEyCnuI2qM= +github.com/lestrrat-go/jwx v1.2.25 h1:tAx93jN2SdPvFn08fHNAhqFJazn5mBBOB8Zli0g0otA= +github.com/lestrrat-go/jwx v1.2.25/go.mod h1:zoNuZymNl5lgdcu6P7K6ie2QRll5HVfF4xwxBBK1NxY= +github.com/lestrrat-go/option v0.0.0-20210103042652-6f1ecfceda35/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I= +github.com/lestrrat-go/option v1.0.0/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I= +github.com/lestrrat-go/option v1.0.1 h1:oAzP2fvZGQKWkvHa1/SAcFolBEca1oN+mQ7eooNBEYU= +github.com/lestrrat-go/option v1.0.1/go.mod h1:5ZHFbivi4xwXxhxY9XHDe2FHo6/Z7WWmtT7T5nBBp3I= +github.com/lestrrat-go/pdebug/v3 v3.0.1/go.mod h1:za+m+Ve24yCxTEhR59N7UlnJomWwCiIqbJRmKeiADU4= +github.com/mattn/go-isatty v0.0.14 h1:yVuAays6BHfxijgZPzw+3Zlu5yQgKGP2/hcQbHb7S9Y= +github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94= +github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421 h1:ZqeYNhU3OHLH3mGKHDcjJRFFRrJa6eAM5H+CtDdOsPc= +github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= +github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M= +github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk= +github.com/okta/okta-jwt-verifier-golang v1.3.1 h1:V+9W5KD3nG7xN0UYtnzXtkurGcs71bLwzPFuUGNMwdE= +github.com/okta/okta-jwt-verifier-golang v1.3.1/go.mod h1:cHffA777f7Yi4K+yDzUp89sGD5v8sk04Pc3CiT1OMR8= +github.com/patrickmn/go-cache v0.0.0-20180815053127-5633e0862627 h1:pSCLCl6joCFRnjpeojzOpEYs4q7Vditq8fySFG5ap3Y= +github.com/patrickmn/go-cache v0.0.0-20180815053127-5633e0862627/go.mod h1:3Qf8kWWT7OJRJbdiICTKqZju1ZixQ/KpMGzzAfe6+WQ= +github.com/pelletier/go-toml/v2 v2.0.1 h1:8e3L2cCQzLFi2CR4g7vGFuFxX7Jl1kKX8gW+iV0GUKU= +github.com/pelletier/go-toml/v2 v2.0.1/go.mod h1:r9LEWfGN8R5k0VXJ+0BkIe7MYkRdwZOjgMj2KwnJFUo= +github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA= +github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= +github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= +github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/rogpeppe/go-internal v1.6.1/go.mod h1:xXDCJY+GAPziupqXw64V24skbSoqbTEfhy4qGm1nDQc= +github.com/rogpeppe/go-internal v1.8.0/go.mod h1:WmiCO8CzOY8rg0OYDC4/i/2WRWAB6poM+XZ2dLUbcbE= +github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= +github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA= +github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= +github.com/ugorji/go v1.2.7/go.mod h1:nF9osbDWLy6bDVv/Rtoh6QgnvNDpmCalQV5urGCCS6M= +github.com/ugorji/go/codec v1.2.7 h1:YPXUKf7fYbp/y8xloBqZOw2qaVggbfwMlI8WM3wZUJ0= +github.com/ugorji/go/codec v1.2.7/go.mod h1:WGN1fab3R1fzQlVQTkfxVtIBhWDRqOviHU95kRgeqEY= +github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74= +golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= +golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= +golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= +golang.org/x/crypto v0.0.0-20201217014255-9d1352758620/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I= +golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97 h1:/UOmuWzQfxxo9UtlXMwuQU8CMgg1eZXqTRwkSQJWKOI= +golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= +golang.org/x/crypto v0.0.0-20220427172511-eb4f295cb31f/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= +golang.org/x/crypto v0.5.0 h1:U/0M97KRkSFvyD/3FSmdP5W5swImpNgle/EHFhOsQPE= +golang.org/x/crypto v0.5.0/go.mod h1:NK/OQwhpMQP3MwtdjgLlYHnH9ebylxKWv3e0fK+mkQU= +golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= +golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA= +golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= +golang.org/x/net v0.0.0-20210226172049-e18ecbb05110 h1:qWPm9rbaAMKs8Bq/9LRpbMqxWRVUAQwMI9fVrssnTfw= +golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= +golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= +golang.org/x/net v0.5.0 h1:GyT4nK/YDHSqa1c4753ouYCDajOYKTja9Xb/OHtgvSw= +golang.org/x/net v0.5.0/go.mod h1:DivGGAXEgPSlEBzxGzZI+ZLohi+xUj054jfeKui00ws= +golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20200625203802-6e8e738ad208/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200323222414-85ca7c5b95cd/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210806184541-e5e7981a1069 h1:siQdpVirKtzPhKl3lZWozZraCFObP8S1v6PRp0bLrtU= +golang.org/x/sys v0.0.0-20210806184541-e5e7981a1069/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.4.0 h1:Zr2JFtRQNX3BCZ8YtxRE9hNJYC8J6I1MVbMg6owUp18= +golang.org/x/sys v0.4.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw= +golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= +golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.6 h1:aRYxNxv6iGQlyVaZmk6ZgYEDa+Jg18DxebPSrd6bg1M= +golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.6.0 h1:3XmdazWV+ubf7QgHSTWeykHOci5oeekaGJBLkrkaw4k= +golang.org/x/text v0.6.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= +golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.0.0-20200918232735-d647fc253266/go.mod h1:z6u4i615ZeAfBE4XtMziQW1fSVJXACjjbWkB/mvPzlU= +golang.org/x/tools v0.0.0-20210114065538-d78b04bdf963/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= +golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= +google.golang.org/protobuf v1.28.0 h1:w43yiav+6bVFTBQFZX0r7ipe9JQ1QsbMgHwbBziscLw= +google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= +gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q= +gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI= +gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= +gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= diff --git a/main.go b/main.go new file mode 100755 index 0000000000000000000000000000000000000000..6c333ddce61b7ac0b25a67bb5c84c2ef76844741 --- /dev/null +++ b/main.go @@ -0,0 +1,164 @@ +package main + +import ( + "net/http" + "os" + "strings" + + "github.com/gin-gonic/gin" + jwtverifier "github.com/okta/okta-jwt-verifier-golang" +) + +type Student struct { + ID string `json:"ID"` + Lastname string `json:"Lastname"` + Name string `json:"Name"` + Filiere string `json:"Filiere"` +} + +var students = []Student{ + {ID: "1", Lastname: "Rodrigues", Name: "Fabio", Filiere: "security"}, + {ID: "2", Lastname: "Obaly", Name: "Farouq", Filiere: "software"}, + {ID: "3", Lastname: "Ruegger", Name: "Yann", Filiere: "software"}, +} + +type Teacher struct { + ID string `json:"ID"` + Lastname string `json:"Lastname"` + Name string `json:"Name"` + Class string `json:"Classname"` +} + +var teachers = []Teacher{ + {ID: "1", Lastname: "Malaspinas", Name: "Orestis", Class: "algo"}, + {ID: "2", Lastname: "Eggenberg", Name: "Mr.", Class: "math"}, + {ID: "3", Lastname: "Upegui", Name: "Mr.", Class: "logique"}, +} + +var toValidate = map[string]string{ + "aud": "api://default", + "cid": os.Getenv("CID"), +} + +func verify(c *gin.Context) bool { + status := true + token := c.Request.Header.Get("Authorization") + if strings.HasPrefix(token, "Bearer ") { + token = strings.TrimPrefix(token, "Bearer ") + verifierSetup := jwtverifier.JwtVerifier{ + Issuer: "https://" + "dev-79020136.okta.com" + "/oauth2/default", + ClaimsToValidate: toValidate, + } + verifier := verifierSetup.New() + jwt, err := verifier.VerifyAccessToken(token) + if err != nil { + c.String(http.StatusForbidden, err.Error()) + print(err.Error()) + status = false + } + if status != false { + sub := jwt.Claims["sub"].(string) + + if targetAuth, ok := authorization[sub]; ok { + m := c.Request.Method + + for _, value := range targetAuth { + if value == m { + return status + } + } + status = false + } + } + } else { + c.String(http.StatusUnauthorized, "Unauthorized") + status = false + } + return status +} + +func getStudents(c *gin.Context) { + c.IndentedJSON(http.StatusOK, students) +} + +func getStudentById(c *gin.Context) { + for _, student := range students { + if student.ID == c.Param("id") { + c.IndentedJSON(http.StatusOK, student) + return + } + } + c.IndentedJSON(http.StatusNotFound, gin.H{"message": "student not found"}) +} + +func removeStudent(c *gin.Context) { + id := c.Param("id") + for i, student := range students { + if student.ID == id { + students = append(students[:i], students[i+1:]...) + break + } + } + c.IndentedJSON(http.StatusNoContent, students) +} + +func getTeachers(c *gin.Context) { + if verify(c) { + c.IndentedJSON(http.StatusOK, teachers) + } + +} + +func getTeacherById(c *gin.Context) { + if verify(c) { + for _, teacher := range teachers { + if teacher.ID == c.Param("id") { + c.IndentedJSON(http.StatusOK, teacher) + return + } + } + c.IndentedJSON(http.StatusNotFound, gin.H{"message": "teacher not found"}) + } +} + +func removeTeacher(c *gin.Context) { + if verify(c) { + id := c.Param("id") + for i, teacher := range teachers { + if teacher.ID == id { + teachers = append(teachers[:i], teachers[i+1:]...) + break + } + } + c.IndentedJSON(http.StatusNoContent, teachers) + } else { + c.AbortWithStatus(http.StatusForbidden) + } +} + +var authorization = make(map[string][]string) + +func main() { + router := gin.Default() + authorization["yann.ruegger@etu.hesge.ch"] = append(authorization["yann.ruegger@etu.hesge.ch"], "POST", "GET", "DELETE") + authorization["fabio.rodrigues-dos-santos@etu.hesge.ch"] = append(authorization["fabio.rodrigues-dos-santos@etu.hesge.ch"], "POST", "GET") + authorization["yona.walther@etu.hesge.ch"] = append(authorization["yona.walther@etu.hesge.ch"], "DELETE", "GET") + authorization["juliano.souza-luz@etu.hesge.ch"] = append(authorization["juliano.souza-luz@etu.hesge.ch"], "GET") + + authorizedGet := router.Group("/", gin.BasicAuth(gin.Accounts{ + "foo": strings.Split(os.Getenv("PWD"), " ")[0], + "aristote": strings.Split(os.Getenv("PWD"), " ")[1], + })) + + authorizedHttp := router.Group("/", gin.BasicAuth(gin.Accounts{ + "aristote": strings.Split(os.Getenv("PWD"), " ")[1], + })) + + authorizedGet.GET("/students", getStudents) + authorizedGet.GET("/students/:id", getStudentById) + router.GET("/teachers", getTeachers) + router.GET("/teachers/:id", getTeacherById) + authorizedHttp.DELETE("/students/:id", removeStudent) + router.DELETE("/teachers/:id", removeTeacher) + router.Run(":8080") +} diff --git a/nginx.conf b/nginx.conf new file mode 100755 index 0000000000000000000000000000000000000000..9fd3adb17e639b1327a23192bd1e58225f96d4de --- /dev/null +++ b/nginx.conf @@ -0,0 +1,45 @@ +#user www www; ## Default: nobody +worker_processes 5; ## Default: 1 +#error_log logs/error.log; +#Spid logs/nginx.pid; +worker_rlimit_nofile 8192; + +events { } + +http { + + map $http_upgrade $connection_upgrade { + default upgrade; + '' close; + } + + server { + listen 80; + server_name localhost; + return 301 https://localhost$request_uri; + } + + server { + listen 443 ssl; + server_name localhost; + + ssl_certificate /etc/certs/cert.pem; + ssl_certificate_key /etc/certs/key.pem; + + access_log /var/log/nginx/data-access.log combined; + + location / { + proxy_pass http://appSec:8080/; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_redirect http://shiny:3838/ $scheme://$http_host/; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + proxy_read_timeout 20d; + proxy_buffering off; + } + } +} diff --git a/var.env b/var.env new file mode 100644 index 0000000000000000000000000000000000000000..28949fd56cb07357cd390120f55e32db19d5e108 --- /dev/null +++ b/var.env @@ -0,0 +1,2 @@ +CID=0oa7q95c8ipKQq35C5d7 +PWD=bar Eucl1de \ No newline at end of file