Jörn Friedrich Dreyer
40906fe57a
- adds an access token middleware to read the x-access-token header, extract the reva user from it and store it in the context - implments the ocs/v[12].php/cloud/user/signing-key endpoint - reads or creates signing key in ocis-store Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
41 lines
1.1 KiB
Go
41 lines
1.1 KiB
Go
package middleware
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/cs3org/reva/pkg/token/manager/jwt"
|
|
"github.com/cs3org/reva/pkg/user"
|
|
)
|
|
|
|
// AccessToken middleware is used to set the user from an x-access-token to the context
|
|
func AccessToken(opts ...Option) func(next http.Handler) http.Handler {
|
|
opt := newOptions(opts...)
|
|
|
|
return func(next http.Handler) http.Handler {
|
|
// TODO: handle error
|
|
tokenManager, err := jwt.New(map[string]interface{}{
|
|
"secret": opt.TokenManagerConfig.JWTSecret,
|
|
"expires": int64(60),
|
|
})
|
|
if err != nil {
|
|
opt.Logger.Fatal().Err(err).Msgf("Could not initialize token-manager")
|
|
}
|
|
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
token := r.Header.Get("x-access-token")
|
|
if token != "" {
|
|
u, err := tokenManager.DismantleToken(r.Context(), token)
|
|
if err != nil {
|
|
opt.Logger.Error().Err(err).Msg("could not dismantle token")
|
|
w.WriteHeader(http.StatusInternalServerError)
|
|
return
|
|
}
|
|
// store user in context for request
|
|
r = r.WithContext(user.ContextSetUser(r.Context(), u))
|
|
}
|
|
|
|
next.ServeHTTP(w, r)
|
|
})
|
|
}
|
|
}
|