mirror of
https://github.com/1f349/tulip.git
synced 2024-12-23 08:44:11 +00:00
34 lines
787 B
Go
34 lines
787 B
Go
|
package server
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/1f349/mjwt"
|
||
|
|
"github.com/1f349/mjwt/auth"
|
||
|
|
"github.com/1f349/violet/utils"
|
||
|
|
"github.com/julienschmidt/httprouter"
|
||
|
|
"net/http"
|
||
|
|
)
|
||
|
|
|
||
|
|
func (h *HttpServer) verifyHandler(rw http.ResponseWriter, req *http.Request, _ httprouter.Params) {
|
||
|
|
// find bearer token
|
||
|
|
bearer := utils.GetBearer(req)
|
||
|
|
if bearer == "" {
|
||
|
|
http.Error(rw, "Missing bearer", http.StatusForbidden)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// after this mjwt is considered valid
|
||
|
|
_, b, err := mjwt.ExtractClaims[auth.AccessTokenClaims](h.signer, bearer)
|
||
|
|
if err != nil {
|
||
|
|
http.Error(rw, "Invalid token", http.StatusForbidden)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// check issuer against config
|
||
|
|
if b.Issuer != h.conf.Load().Issuer {
|
||
|
|
http.Error(rw, "Invalid issuer", http.StatusBadRequest)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
rw.WriteHeader(http.StatusOK)
|
||
|
|
}
|