RADIUS Server with OneLogin

main.go

package main

import (
	"log"
	"os"

	"github.com/onelogin/onelogin-go-sdk/pkg/client"
	"github.com/onelogin/onelogin-go-sdk/pkg/models"
	"github.com/onelogin/onelogin-go-sdk/pkg/oltypes"
	"layeh.com/radius"
	"layeh.com/radius/rfc2865"
)

func main() {
	clientID := os.Getenv("OL_CLIENT_ID")
	clientSecret := os.Getenv("OL_CLIENT_SECRET")
	clientEndpoint := os.Getenv("OL_ENDPOINT")
	radiusSecret := os.Getenv("RADIUS_SECRET")

	oneloginClient, err := client.NewClient(&client.APIClientConfig{
		Timeout:      60,
		ClientID:     clientID,
		ClientSecret: clientSecret,
		Url:          clientEndpoint,
	})
	if err != nil {
		log.Fatal(err)
	}

	handler := func(w radius.ResponseWriter, r *radius.Request) {
		username := rfc2865.UserName_GetString(r.Packet)
		password := rfc2865.UserPassword_GetString(r.Packet)
		subdomain := os.Getenv("OL_SUBDOMAIN")

		request := &models.SessionLoginTokenRequest{
			UsernameOrEmail: oltypes.String(username),
			Password:        oltypes.String(password),
			Subdomain:       oltypes.String(subdomain),
		}

		resp, _, err := oneloginClient.Services.SessionLoginTokensV1.CreateSessionLoginToken(request)
		if err != nil {
			log.Println(err)
		}

		var code radius.Code

		if resp.StatusCode == 200 {
			code = radius.CodeAccessAccept
		} else {
			code = radius.CodeAccessReject
		}

		log.Printf("Writing %v to %v", code, r.RemoteAddr)
		w.Write(r.Response(code))
	}

	server := radius.PacketServer{
		Handler:      radius.HandlerFunc(handler),
		SecretSource: radius.StaticSecretSource([]byte(radiusSecret)),
	}

	log.Printf("Starting server on :1812")
	if err := server.ListenAndServe(); err != nil {
		log.Fatal(err)
	}
}