minauth

This is the minimum code required to get auth (via Twitter) and user accounts working with Go and Google Cloud (App Engine).

This is the base user/auth code I wrote for This Way or That (go-lang edition).

As always, this is a work in progress. Follow me on twitter: @ussherpress

How to test it out

git clone into your $GOPATH/pkg/src/minauth.

cd minauth/example
cp rename_app.yaml app.yaml

Edit app.yaml and enter your own session secret and twitter consumer key and consumer secret. (These bits come from https://apps.twitter.com/)

Test it out with:

dev_appserver.py app.yaml

How to use it in your project

Simply provide a link to /auth/signin to sign in and /auth/signout to sign out on your page. (See REST API section below for more info.)

Sample code for getting the currently signed in user:

import "github.com/allenu/minauth"

func myHandler(w http.ResponseWriter, r *http.Request) {
    userInfo := minauth.GetUserInfo(r)

    // userInfo.Username is user's twitter handle or "anonymous" if not signed in
    // userInfo.UserId is the user's unique ID (a UUID generated on first sign-in) or "anonymous" if not signed in
}

Parts to this system

User Storage

User info is stored in Google App Engine datastore (see web/backend/user).

When a user signs in for the first time, their info is added to the datastore. The user info consists of

• UserId, which is a UUID generated for each user
• Username, which is currently just the twitter handle (in the future this could be something of the user's choosing)
• Servicename, which is just the string "twitter" for now (if other auth providers are added, this would be "google" or "facebook")
• ServiceId, which is the unique identifier provided by twitter, prefixed by "twitter-"

When a user signs in again, this info is looked up via the Servicename and ServiceId.

REST API

To access info on the user or to sign in and out:

/api/user - this returns the current user info as json ({UserId:, Username:}).

/auth/signin - initiates the sign-in for twitter oauth
/auth/signout - signs the current user out
/auth/callback - handler for Twitter oauth callback