-
Notifications
You must be signed in to change notification settings - Fork 1
/
authenticate.go
71 lines (57 loc) · 1.42 KB
/
authenticate.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
package server
import (
"log"
"net/http"
"github.com/upsub/dispatcher/server/auth"
"github.com/upsub/dispatcher/server/config"
"github.com/upsub/dispatcher/server/dispatcher"
"github.com/upsub/dispatcher/server/util"
)
type handler func(*config.Config, *dispatcher.Dispatcher, http.ResponseWriter, *http.Request)
func parseQueryParams(r *http.Request) {
allowedQueryParams := []string{
"upsub-app-id",
"upsub-secret",
"upsub-public",
"upsub-connection-name",
"upsub-protocol",
}
if query := r.URL.Query(); len(query) > 0 {
for _, key := range allowedQueryParams {
r.Header.Set(key, query.Get(key))
}
}
}
func reject(w http.ResponseWriter) {
log.Print("[AUTH] Invalid authentication credentials")
http.Error(w, "Invalid authentication credentials", 401)
}
func authenticate(
c *config.Config,
d *dispatcher.Dispatcher,
store *auth.Store,
next handler,
) http.HandlerFunc {
return func(w http.ResponseWriter, r *http.Request) {
parseQueryParams(r)
if store.Length() == 0 {
next(c, d, w, r)
return
}
auth := store.Find(r.Header.Get("upsub-app-id"))
if auth == nil {
reject(w)
return
}
origin := r.Header.Get("Origin")
if len(origin) == 0 && auth.Secret == r.Header.Get("upsub-secret") {
next(c, d, w, r)
return
}
if len(origin) > 0 && auth.Public == r.Header.Get("upsub-public") && util.Contains(auth.Origins, origin) {
next(c, d, w, r)
return
}
reject(w)
}
}