JWT Authentication

[transtone]

my env: win10/amd64/go-1.6
when use

# Valid token
$  curl localhost:1323/restricted -H "Authorization: Bearer <token>" 

it gets not "Access granted with JWT" but nothing.

it seems func restricted(){...} not executed.

[vishr]

@axdg Can you please look at it?

[axdg]

Sure; @transtone, I'm not able to replicate the problem - do you think that you could provide a snippet of your terminal IO so that I can figure out what's happening.

[transtone]

this is what I do, and all my system(linux/windows) got the same problem:

1. # go get github.com/labstack/echo
# go get github.com/dgrijalva/jwt-go
2. # git clone https://github.com/labstack/echox.git
# cd echox/recipe/jwt-authentication
3. # go run main.go
# curl localhost:1323/restricted -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE0NTgwOTY1NjAsInVzZXJOYW1lIjoidHJhbnN0b25lIn0.2S-cvb_0TwCeWbX6weP9yhXgb3n2Ck_hbTfUEIKwzOw"

it gets nothing.

what's wrong with these steps?

curl -D - localhost:1323/restricted -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE0NTgwOTY1NjAsInVzZXJOYW1lIjoidHJhbnN0b25lIn0.2S-cvb_0TwCeWbX6weP9yhXgb3n2Ck_hbTfUEIKwzOw"

it get:

HTTP/1.1 200 OK
Vary: Accept-Encoding
Vary: Origin
Date: Sun, 13 Mar 2016 03:25:17 GMT
Content-Length: 0
Content-Type: text/plain; charset=utf-8

when comment the JWTAuth line, it get:

HTTP/1.1 200 OK
Content-Type: text/plain; charset=utf-8
Vary: Accept-Encoding
Vary: Origin
Date: Sun, 13 Mar 2016 03:30:19 GMT
Content-Length: 25

Access granted with JWT.

[muei]

+1

[transtone]

it seems the JWTAuth func have a problem:
https://github.com/labstack/echox/blob/master/recipe/jwt-authentication/main.go#L40

                if err == nil && t.Valid {
                    // Store token claims in echo.Context
                    c.Set("claims", t.Claims)
                    return nil
                }

it should be return next.Handle(c) not return nil

[vishr]

@transtone Looks like it did not upgrade properly to v2. I will fix it.