65 lines
1.5 KiB
Go
65 lines
1.5 KiB
Go
package authorization
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
"github.com/sirupsen/logrus"
|
|
)
|
|
|
|
type contextKey string
|
|
|
|
const (
|
|
AuthKey = contextKey("authorization")
|
|
UserClaim = contextKey("user-claims")
|
|
CookieName = "token"
|
|
)
|
|
|
|
func Middleware(handler http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
jwt := ""
|
|
auth, err := r.Cookie(CookieName)
|
|
if err == nil {
|
|
jwt = auth.Value
|
|
} else if r.Header.Get("Authorization") != "" {
|
|
jwt = r.Header.Get("Authorization")
|
|
}
|
|
|
|
ctx := context.WithValue(r.Context(), AuthKey, jwt)
|
|
r = r.WithContext(ctx)
|
|
handler.ServeHTTP(w, r)
|
|
})
|
|
}
|
|
|
|
// RestMiddlewareWithRole verifies jwt and checks if user has enough privilege to access route
|
|
func RestMiddlewareWithRole(handler http.Handler, roles []string) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
jwt := ""
|
|
auth, err := r.Cookie(CookieName)
|
|
if err == nil {
|
|
jwt = auth.Value
|
|
} else if r.Header.Get("Authorization") != "" {
|
|
jwt = r.Header.Get("Authorization")
|
|
}
|
|
user, err := UserValidateJWT(jwt)
|
|
if err != nil {
|
|
logrus.WithError(err).Error("Invalid Auth Cookie")
|
|
w.WriteHeader(http.StatusUnauthorized)
|
|
w.Write([]byte("Error verifying JWT token: " + err.Error()))
|
|
return
|
|
}
|
|
if len(roles) == 0 {
|
|
handler.ServeHTTP(w, r)
|
|
return
|
|
}
|
|
for _, role := range roles {
|
|
if role == user["role"] {
|
|
handler.ServeHTTP(w, r)
|
|
return
|
|
}
|
|
}
|
|
w.WriteHeader(http.StatusUnauthorized)
|
|
return
|
|
})
|
|
}
|