jwt.go

package mw

import (
	"net/http"
	"strings"
	"time"

	"github.com/crouse/pms/internal/errors"

	"github.com/crouse/pms/internal"

	"github.com/crouse/pms/cmd/api/config"

	jwt "github.com/dgrijalva/jwt-go"
	"github.com/gin-gonic/gin"
)

// NewJWT generates new JWT variable necessery for auth middleware
func NewJWT(c *config.JWT) *JWT {
	return &JWT{
		Realm:    c.Realm,
		Key:      []byte(c.Secret),
		Duration: time.Duration(c.Duration) * time.Minute,
		Algo:     c.SigningAlgorithm,
	}
}

// JWT provides a Json-Web-Token authentication implementation
type JWT struct {
	// Realm name to display to the user.
	Realm string

	// Secret key used for signing.
	Key []byte

	// Duration for which the jwt token is valid.
	Duration time.Duration

	// JWT signing algorithm
	Algo string
}

// MWFunc makes JWT implement the Middleware interface.
func (j *JWT) MWFunc() gin.HandlerFunc {

	return func(c *gin.Context) {
		token, err := j.ParseToken(c)
		if err != nil || !token.Valid {
			c.Header("WWW-Authenticate", "JWT realm="+j.Realm)
			c.AbortWithStatus(http.StatusUnauthorized)
			return
		}

		claims := token.Claims.(jwt.MapClaims)

		id := int(claims["id"].(float64))
		companyID := int(claims["c"].(float64))
		locationID := int(claims["l"].(float64))
		username := claims["u"].(string)
		email := claims["e"].(string)
		role := int8(claims["r"].(float64))

		c.Set("id", id)
		c.Set("company_id", companyID)
		c.Set("location_id", locationID)
		c.Set("username", username)
		c.Set("email", email)
		c.Set("role", role)

		c.Next()
	}
}

// ParseToken parses token from Authorization header
func (j *JWT) ParseToken(c *gin.Context) (*jwt.Token, error) {

	token := c.Request.Header.Get("Authorization")
	if token == "" {
		return nil, apperr.Unauthorized
	}
	parts := strings.SplitN(token, " ", 2)
	if !(len(parts) == 2 && parts[0] == "Bearer") {
		return nil, apperr.Unauthorized
	}

	return jwt.Parse(parts[1], func(token *jwt.Token) (interface{}, error) {
		if jwt.GetSigningMethod(j.Algo) != token.Method {
			return nil, apperr.Generic
		}
		return j.Key, nil
	})

}

// GenerateToken generates new JWT token and populates it with user data
func (j *JWT) GenerateToken(u *model.User) (string, string, error) {
	token := jwt.New(jwt.GetSigningMethod(j.Algo))
	claims := token.Claims.(jwt.MapClaims)

	expire := time.Now().Add(j.Duration)
	claims["id"] = u.ID
	claims["u"] = u.Username
	claims["e"] = u.Email
	claims["r"] = u.Role.AccessLevel
	claims["c"] = u.CompanyID
	claims["l"] = u.LocationID
	claims["exp"] = expire.Unix()

	tokenString, err := token.SignedString(j.Key)
	return tokenString, expire.Format(time.RFC3339), err
}