annika/jwtauth
1
0
Fork 0
mirror of https://forgejo.merr.is/annika/jwtauth.git synced 2025-12-13 05:42:12 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add VerifyRequest func to verify requests directly

Browse source
This commit is contained in:
Peter Kieltyka 2017-07-12 21:25:34 -04:00
parent 287076f82d
commit 1281aa5c53
1 changed files with 69 additions and 65 deletions
Download patch file Download diff file Expand all files Collapse all files

36
jwtauth.go
View file

@ -72,11 +72,19 @@ func Verifier(ja *JwtAuth) func(http.Handler) http.Handler {
}
}
// TODO: explain
func Verify(ja *JwtAuth, paramAliases ...string) func(http.Handler) http.Handler {
return func(next http.Handler) http.Handler {
hfn := func(w http.ResponseWriter, r *http.Request) {
ctx := r.Context()
token, err := VerifyRequest(ja, r, paramAliases...)
ctx = NewContext(ctx, token, err)
next.ServeHTTP(w, r.WithContext(ctx))
}
return http.HandlerFunc(hfn)
}
}
func VerifyRequest(ja *JwtAuth, r *http.Request, paramAliases ...string) (*jwt.Token, error) {
var tokenStr string
var err error
@ -120,32 +128,28 @@ func Verify(ja *JwtAuth, paramAliases ...string) func(http.Handler) http.Handler
err = ErrExpired
}
ctx = NewContext(ctx, token, err)
next.ServeHTTP(w, r.WithContext(ctx))
return
// ctx = NewContext(ctx, token, err)
// next.ServeHTTP(w, r.WithContext(ctx))
return token, err
}
if token == nil || !token.Valid || token.Method != ja.signer {
err = ErrUnauthorized
ctx = NewContext(ctx, token, err)
next.ServeHTTP(w, r.WithContext(ctx))
return
// ctx = NewContext(ctx, token, err)
// next.ServeHTTP(w, r.WithContext(ctx))
return token, err
}
// Check expiry via "exp" claim
if IsExpired(token) {
err = ErrExpired
ctx = NewContext(ctx, token, err)
next.ServeHTTP(w, r.WithContext(ctx))
return
// ctx = NewContext(ctx, token, err)
// next.ServeHTTP(w, r.WithContext(ctx))
return token, err
}
// Valid! pass it down the context to an authenticator middleware
ctx = NewContext(ctx, token, err)
next.ServeHTTP(w, r.WithContext(ctx))
}
return http.HandlerFunc(hfn)
}
// Valid!
return token, nil
}
func (ja *JwtAuth) Encode(claims Claims) (t *jwt.Token, tokenString string, err error) {