-
Notifications
You must be signed in to change notification settings - Fork 0
/
session.go
122 lines (101 loc) · 2.78 KB
/
session.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
package session
import (
"time"
jwt "github.com/dgrijalva/jwt-go"
core "github.com/miphilipp/devchat-server/internal"
)
type Manager struct {
persistance Persistance
ttl time.Duration
secret []byte
}
func NewManager(persistance Persistance, secret []byte) *Manager {
return &Manager{
persistance: persistance,
ttl: 7 * 24 * time.Hour,
secret: secret,
}
}
// ValidateToken Checks if the token is valid and/or black listed.
func (s *Manager) ValidateToken(token string) (string, error) {
claims, err := VerifyToken(token, s.secret)
if err != nil && claims == nil {
return "", core.ErrInvalidToken
}
tokenIsValid := err == nil
username, _ := GetClaims(claims)
isBlackListed, err := s.persistance.IsBlackListed(username, token)
if err != nil {
return "", err
}
if isBlackListed {
return "", core.ErrInvalidToken
}
if !tokenIsValid {
return "", core.ErrInvalidToken
}
return username, nil
}
// GetSessionToken creates and then returns a new token for the given user.
func (s *Manager) GetSessionToken(name string) (string, error) {
exp := time.Now().UTC().Add(s.ttl).Unix()
tokenString, err := NewToken(exp, name, s.secret)
err = s.persistance.Store(name, tokenString, exp)
if err != nil {
return "", err
}
return tokenString, err
}
// InvlidateToken puts the token on the black list.
func (s *Manager) InvlidateToken(token string) error {
claims, err := VerifyToken(token, s.secret)
if err != nil && claims == nil {
return core.ErrInvalidToken
}
_, ok := claims.(jwt.MapClaims)["name"]
if !ok {
return core.ErrInvalidToken
}
_, ok = claims.(jwt.MapClaims)["exp"]
if !ok {
return core.ErrInvalidToken
}
userName, exp := GetClaims(claims)
err = s.persistance.BlackList(userName, token, exp)
if err != nil {
return err
}
return nil
}
func GetClaims(claims jwt.Claims) (name string, exp float64) {
name = claims.(jwt.MapClaims)["name"].(string)
exp = claims.(jwt.MapClaims)["exp"].(float64)
return
}
// InvlidateAllTokens invalidates all tokens of a user by putting them
// on the black list.
func (s *Manager) InvlidateAllTokens(username string) error {
return s.persistance.BlackListAll(username)
}
func VerifyToken(tokenString string, secret []byte) (jwt.Claims, error) {
token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
return secret, nil
})
if err != nil {
return token.Claims, err
}
return token.Claims, nil
}
// NewToken creates a new JWT using the HS256 signing algorithm.
//
// The following claims are set:
// - exp
// - name
func NewToken(exp int64, username string, secret []byte) (string, error) {
token := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
"exp": exp,
"name": username,
})
tokenString, err := token.SignedString(secret)
return tokenString, err
}