forked from getfider/fider
-
Notifications
You must be signed in to change notification settings - Fork 0
/
jwt.go
83 lines (70 loc) · 2.2 KB
/
jwt.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
package jwt
import (
jwtgo "github.com/dgrijalva/jwt-go"
"github.com/getfider/fider/app/pkg/env"
"github.com/getfider/fider/app/pkg/errors"
)
var jwtSecret = env.Config.JWTSecret
// Metadata is the basic JWT information
type Metadata = jwtgo.StandardClaims
const (
//FiderClaimsOriginUI is assigned to Fider claims when the Auth Token is generated through the UI
FiderClaimsOriginUI = "ui"
//FiderClaimsOriginAPI is assigned to Fider claims when the Auth Token is generated through the API
FiderClaimsOriginAPI = "api"
)
// FiderClaims represents what goes into JWT tokens
type FiderClaims struct {
UserID int `json:"user/id"`
UserName string `json:"user/name"`
UserEmail string `json:"user/email"`
Origin string `json:"origin"`
Metadata
}
// OAuthClaims represents what goes into temporary OAuth JWT tokens
type OAuthClaims struct {
OAuthID string `json:"oauth/id"`
OAuthProvider string `json:"oauth/provider"`
OAuthName string `json:"oauth/name"`
OAuthEmail string `json:"oauth/email"`
Metadata
}
// Encode creates new JWT token with given claims
func Encode(claims jwtgo.Claims) (string, error) {
jwtToken := jwtgo.NewWithClaims(jwtgo.GetSigningMethod("HS256"), claims)
token, err := jwtToken.SignedString([]byte(jwtSecret))
if err != nil {
return "", errors.Wrap(err, "failed to encode the requested claims")
}
return token, nil
}
// DecodeFiderClaims extract claims from JWT tokens
func DecodeFiderClaims(token string) (*FiderClaims, error) {
claims := &FiderClaims{}
err := decode(token, claims)
if err != nil {
return nil, errors.Wrap(err, "failed to decode Fider claims")
}
return claims, nil
}
// DecodeOAuthClaims extract OAuthClaims from given JWT token
func DecodeOAuthClaims(token string) (*OAuthClaims, error) {
claims := &OAuthClaims{}
err := decode(token, claims)
if err != nil {
return nil, errors.Wrap(err, "failed to decode OAuth claims")
}
return claims, nil
}
func decode(token string, claims jwtgo.Claims) error {
jwtToken, err := jwtgo.ParseWithClaims(token, claims, func(t *jwtgo.Token) (interface{}, error) {
return []byte(jwtSecret), nil
})
if err == nil {
err = claims.Valid()
}
if err == nil && jwtToken.Valid {
return nil
}
return err
}