mirror of
https://github.com/elyby/chrly.git
synced 2024-08-24 22:00:01 +05:30
79 lines
1.5 KiB
Go
79 lines
1.5 KiB
Go
package http
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/SermoDigital/jose/crypto"
|
|
"github.com/SermoDigital/jose/jws"
|
|
)
|
|
|
|
var hashAlg = crypto.SigningMethodHS256
|
|
|
|
const scopesClaim = "scopes"
|
|
|
|
type Scope string
|
|
|
|
var (
|
|
SkinScope = Scope("skin")
|
|
)
|
|
|
|
type JwtAuth struct {
|
|
Emitter
|
|
Key []byte
|
|
}
|
|
|
|
func (t *JwtAuth) NewToken(scopes ...Scope) ([]byte, error) {
|
|
if len(t.Key) == 0 {
|
|
return nil, errors.New("signing key not available")
|
|
}
|
|
|
|
claims := jws.Claims{}
|
|
claims.Set(scopesClaim, scopes)
|
|
claims.SetIssuedAt(time.Now())
|
|
encoder := jws.NewJWT(claims, hashAlg)
|
|
token, err := encoder.Serialize(t.Key)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return token, nil
|
|
}
|
|
|
|
func (t *JwtAuth) Authenticate(req *http.Request) error {
|
|
if len(t.Key) == 0 {
|
|
return t.emitErr(errors.New("Signing key not set"))
|
|
}
|
|
|
|
bearerToken := req.Header.Get("Authorization")
|
|
if bearerToken == "" {
|
|
return t.emitErr(errors.New("Authentication header not presented"))
|
|
}
|
|
|
|
if !strings.EqualFold(bearerToken[0:7], "BEARER ") {
|
|
return t.emitErr(errors.New("Cannot recognize JWT token in passed value"))
|
|
}
|
|
|
|
tokenStr := bearerToken[7:]
|
|
token, err := jws.ParseJWT([]byte(tokenStr))
|
|
if err != nil {
|
|
return t.emitErr(errors.New("Cannot parse passed JWT token"))
|
|
}
|
|
|
|
err = token.Validate(t.Key, hashAlg)
|
|
if err != nil {
|
|
return t.emitErr(errors.New("JWT token have invalid signature. It may be corrupted or expired"))
|
|
}
|
|
|
|
t.Emit("authentication:success")
|
|
|
|
return nil
|
|
}
|
|
|
|
func (t *JwtAuth) emitErr(err error) error {
|
|
t.Emit("authentication:error", err)
|
|
return err
|
|
}
|