50 lines
934 B
Go
50 lines
934 B
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"github.com/filecoin-project/go-lotus/api"
|
|
logging "github.com/ipfs/go-log"
|
|
)
|
|
|
|
var log = logging.Logger("auth")
|
|
|
|
type Handler struct {
|
|
Verify func(ctx context.Context, token string) ([]string, error)
|
|
Next http.HandlerFunc
|
|
}
|
|
|
|
func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
|
|
ctx := r.Context()
|
|
|
|
token := r.Header.Get("Authorization")
|
|
if token == "" {
|
|
token = r.FormValue("token")
|
|
if token != "" {
|
|
token = "Bearer " + token
|
|
}
|
|
}
|
|
|
|
if token != "" {
|
|
if !strings.HasPrefix(token, "Bearer ") {
|
|
log.Warn("missing Bearer prefix in auth header")
|
|
w.WriteHeader(401)
|
|
return
|
|
}
|
|
token = strings.TrimPrefix(token, "Bearer ")
|
|
|
|
allow, err := h.Verify(ctx, token)
|
|
if err != nil {
|
|
log.Warnf("JWT Verification failed: %s", err)
|
|
w.WriteHeader(401)
|
|
return
|
|
}
|
|
|
|
ctx = api.WithPerm(ctx, allow)
|
|
}
|
|
|
|
h.Next(w, r.WithContext(ctx))
|
|
}
|