seknox / trasa

Zero Trust Service Access
https://www.trasa.io
Mozilla Public License 2.0
384 stars 68 forks source link

[FEATURE] Skip agent forwarding request to client if authentication check is already successful #272

Open bhrg3se opened 3 years ago

bhrg3se commented 3 years ago

Describe the feature:

SSH proxy tries to request agent forwarding channel from client before creating session to upstream server. It will cause ssh client to show this warning.

Screen Shot 2021-02-09 at 7 53 42 PM

Since authentication is already checked in sshproxy.handleUpstreamPasswordAndKey function, we can skip this if authentication us successful.

Describe why this feature is needed:

Scope of feature: