Wifidog Flow Diagram

最新推荐文章于 2018-11-06 01:16:50 发布

转载最新推荐文章于 2018-11-06 01:16:50 发布 · 2.1k 阅读

文章标签：

11 篇文章

订阅专栏

本文详细介绍了客户端通过网关进行身份验证的过程。包括初始请求、重定向到本地端口、登录页面显示、用户输入凭证、成功认证后的重定向流程及最终获取成功页面等关键步骤。

General Flow Description:

The client does his initial request, as if he was already connected, (e.g.: http://www.google.ca)
The Gateway's firewall rules mangle the request to redirect it to a local port on the Gateway. When that's the done, the Gateway provides an HTTP Redirect reply that contains the Gateway ID, Gateway FQDN and other informations
The Client does his request to the Auth Server as specified by the Gateway, see Login Protocol
The Gateway replies with a (potentially custom) splash (login) page
The Client provides his identification informations (username and password)
Upon succesful authentication, the client gets an HTTP Redirect to the Gateway's own web server with his authentication proof (a one-time token), http://GatewayIP:GatewayPort/wifidog/auth?token=[auth token]
The Client then connects to the Gateway and thus gives it his token
The Gateway requests validation of the token from the Auth Server, see Client Protocol
The Auth Server confirms the token
The Gateway then sends a redirect to the Client to obtain the Success Page from the Auth Server, redirects to http://auth_server/portal/
The Auth Server notifies the Client that his request was successful