67 lines
1.4 KiB
Go
67 lines
1.4 KiB
Go
package auth
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/golang-jwt/jwt/v5"
|
|
)
|
|
|
|
func GenerateJWT(key string, user User, expiryTimestamp uint64) (string, error) {
|
|
claims := jwt.MapClaims{
|
|
"user": user,
|
|
"exp": expiryTimestamp,
|
|
}
|
|
|
|
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
|
|
return token.SignedString([]byte(key))
|
|
}
|
|
|
|
func invalidAuth(c *gin.Context) {
|
|
c.String(http.StatusUnauthorized, "Unauthorized.")
|
|
c.Abort()
|
|
}
|
|
|
|
func JwtMiddleware(secret string) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
jwtSplit := strings.Split(c.GetHeader("Authorization"), " ")
|
|
|
|
if jwtSplit[0] != "Bearer" {
|
|
invalidAuth(c)
|
|
return
|
|
}
|
|
|
|
claims, err := ValidateJWT(jwtSplit[1], secret)
|
|
|
|
if err != nil {
|
|
invalidAuth(c)
|
|
return
|
|
}
|
|
|
|
c.Set("claims", claims)
|
|
|
|
c.Next()
|
|
}
|
|
}
|
|
|
|
func ValidateJWT(jwtString, key string) (jwt.MapClaims, error) {
|
|
token, err := jwt.Parse(jwtString, func(token *jwt.Token) (any, error) {
|
|
if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
|
|
return nil, fmt.Errorf("Invalid signing method!")
|
|
}
|
|
|
|
return []byte(key), nil
|
|
})
|
|
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
|
|
return claims, nil
|
|
}
|
|
|
|
return nil, fmt.Errorf("Invalid token!")
|
|
}
|