Add set cookie

Author: andrewheberle

README.md

@@ -93,7 +93,7 @@ The following HAProxy configuration snippet shows this process:
 # a protected backend
 backend be_protected
         # set required headers
-        http-request set-header X-Forward-For %[src]
+        http-request set-header X-Forwarded-For %[src]
 	http-request set-header X-Forwarded-Proto %[ssl_fc,iif(https,http)]
 	http-request set-header X-Forwarded-Host %[req.hdr(Host)]
 	http-request set-header X-Forwarded-Uri %[capture.req.uri]

cmd/haproxy-auth-request/main.go

@@ -15,7 +15,6 @@ import (
 )
 
 func main() {
-	// logging
 	// command line flags
 	pflag.String("listen", "127.0.0.1:3000", "Listen address")
 	pflag.String("url", "http://127.0.0.1:9091/api/authz/forward-auth", "URL to perform verification against")

examples/haproxy.cfg

@@ -54,7 +54,7 @@ backend be_protected
 	mode http
 
 	# set required headers
-	http-request set-header X-Forward-For %[src]
+	http-request set-header X-Forwarded-For %[src]
 	http-request set-header X-Forwarded-Proto %[ssl_fc,iif(https,http)]
 	http-request set-header X-Forwarded-Host %[req.hdr(Host)]
 	http-request set-header X-Forwarded-Uri %[capture.req.uri]

pkg/auth/auth.go

@@ -114,6 +114,14 @@ func (auth *AuthHandler) Handler(req *request.Request) {
 			}
 		}
 
+		// set cookie if present
+		if cookies := res.Cookies(); len(cookies) == 1 {
+			if v := cookies[0].String(); v != "" {
+				req.Actions.SetVar(action.ScopeRequest, "response_cookie.name", cookies[0].Name)
+				req.Actions.SetVar(action.ScopeRequest, "response_cookie.value", v)
+			}
+		}
+
 		logger.Info("message handled")
 		return
 	}