|
1 |
| -package generates |
2 |
| - |
3 |
| -import ( |
4 |
| - "encoding/base64" |
5 |
| - "strings" |
6 |
| - "time" |
7 |
| - |
8 |
| - errs "errors" |
9 |
| - |
10 |
| - "github.com/dgrijalva/jwt-go" |
11 |
| - "gopkg.in/oauth2.v3" |
12 |
| - "gopkg.in/oauth2.v3/errors" |
13 |
| - "gopkg.in/oauth2.v3/utils/uuid" |
14 |
| -) |
15 |
| - |
16 |
| -// JWTAccessClaims jwt claims |
17 |
| -type JWTAccessClaims struct { |
18 |
| - jwt.StandardClaims |
19 |
| -} |
20 |
| - |
21 |
| -// Valid claims verification |
22 |
| -func (a *JWTAccessClaims) Valid() error { |
23 |
| - if time.Unix(a.ExpiresAt, 0).Before(time.Now()) { |
24 |
| - return errors.ErrInvalidAccessToken |
25 |
| - } |
26 |
| - return nil |
27 |
| -} |
28 |
| - |
29 |
| -// NewJWTAccessGenerate create to generate the jwt access token instance |
30 |
| -func NewJWTAccessGenerate(key []byte, method jwt.SigningMethod) *JWTAccessGenerate { |
31 |
| - return &JWTAccessGenerate{ |
32 |
| - SignedKey: key, |
33 |
| - SignedMethod: method, |
34 |
| - } |
35 |
| -} |
36 |
| - |
37 |
| -// JWTAccessGenerate generate the jwt access token |
38 |
| -type JWTAccessGenerate struct { |
39 |
| - SignedKey []byte |
40 |
| - SignedMethod jwt.SigningMethod |
41 |
| -} |
42 |
| - |
43 |
| -// Token based on the UUID generated token |
44 |
| -func (a *JWTAccessGenerate) Token(data *oauth2.GenerateBasic, isGenRefresh bool) (access, refresh string, err error) { |
45 |
| - claims := &JWTAccessClaims{ |
46 |
| - StandardClaims: jwt.StandardClaims{ |
47 |
| - Audience: data.Client.GetID(), |
48 |
| - Subject: data.UserID, |
49 |
| - ExpiresAt: data.TokenInfo.GetAccessCreateAt().Add(data.TokenInfo.GetAccessExpiresIn()).Unix(), |
50 |
| - }, |
51 |
| - } |
52 |
| - |
53 |
| - token := jwt.NewWithClaims(a.SignedMethod, claims) |
54 |
| - var key interface{} |
55 |
| - if a.isEs() { |
56 |
| - key, err = jwt.ParseECPrivateKeyFromPEM(a.SignedKey) |
57 |
| - if err != nil { |
58 |
| - return "", "", err |
59 |
| - } |
60 |
| - } else if a.isRsOrPS() { |
61 |
| - key, err = jwt.ParseRSAPrivateKeyFromPEM(a.SignedKey) |
62 |
| - if err != nil { |
63 |
| - return "", "", err |
64 |
| - } |
65 |
| - } else if a.isHs() { |
66 |
| - key = a.SignedKey |
67 |
| - } else { |
68 |
| - return "", "", errs.New("unsupported sign method") |
69 |
| - } |
70 |
| - access, err = token.SignedString(key) |
71 |
| - if err != nil { |
72 |
| - return |
73 |
| - } |
74 |
| - |
75 |
| - if isGenRefresh { |
76 |
| - refresh = base64.URLEncoding.EncodeToString(uuid.NewSHA1(uuid.Must(uuid.NewRandom()), []byte(access)).Bytes()) |
77 |
| - refresh = strings.ToUpper(strings.TrimRight(refresh, "=")) |
78 |
| - } |
79 |
| - |
80 |
| - return |
81 |
| -} |
82 |
| - |
83 |
| -func (a *JWTAccessGenerate) isEs() bool { |
84 |
| - return strings.HasPrefix(a.SignedMethod.Alg(), "ES") |
85 |
| -} |
86 |
| - |
87 |
| -func (a *JWTAccessGenerate) isRsOrPS() bool { |
88 |
| - isRs := strings.HasPrefix(a.SignedMethod.Alg(), "RS") |
89 |
| - isPs := strings.HasPrefix(a.SignedMethod.Alg(), "PS") |
90 |
| - return isRs || isPs |
91 |
| -} |
92 |
| - |
93 |
| -func (a *JWTAccessGenerate) isHs() bool { |
94 |
| - return strings.HasPrefix(a.SignedMethod.Alg(), "HS") |
95 |
| -} |
| 1 | +package generates |
| 2 | + |
| 3 | +import ( |
| 4 | + "encoding/base64" |
| 5 | + "strings" |
| 6 | + "time" |
| 7 | + |
| 8 | + errs "errors" |
| 9 | + |
| 10 | + "github.com/dgrijalva/jwt-go" |
| 11 | + "gopkg.in/oauth2.v3" |
| 12 | + "gopkg.in/oauth2.v3/errors" |
| 13 | + "gopkg.in/oauth2.v3/utils/uuid" |
| 14 | +) |
| 15 | + |
| 16 | +// JWTAccessClaims jwt claims |
| 17 | +type JWTAccessClaims struct { |
| 18 | + jwt.StandardClaims |
| 19 | +} |
| 20 | + |
| 21 | +// Valid claims verification |
| 22 | +func (a *JWTAccessClaims) Valid() error { |
| 23 | + if time.Unix(a.ExpiresAt, 0).Before(time.Now()) { |
| 24 | + return errors.ErrInvalidAccessToken |
| 25 | + } |
| 26 | + return nil |
| 27 | +} |
| 28 | + |
| 29 | +// NewJWTAccessGenerate create to generate the jwt access token instance |
| 30 | +func NewJWTAccessGenerate(key []byte, method jwt.SigningMethod) *JWTAccessGenerate { |
| 31 | + return &JWTAccessGenerate{ |
| 32 | + SignedKey: key, |
| 33 | + SignedMethod: method, |
| 34 | + } |
| 35 | +} |
| 36 | + |
| 37 | +// JWTAccessGenerate generate the jwt access token |
| 38 | +type JWTAccessGenerate struct { |
| 39 | + SignedKey []byte |
| 40 | + SignedMethod jwt.SigningMethod |
| 41 | +} |
| 42 | + |
| 43 | +// Token based on the UUID generated token |
| 44 | +func (a *JWTAccessGenerate) Token(data *oauth2.GenerateBasic, isGenRefresh bool) (string, string, error) { |
| 45 | + claims := &JWTAccessClaims{ |
| 46 | + StandardClaims: jwt.StandardClaims{ |
| 47 | + Audience: data.Client.GetID(), |
| 48 | + Subject: data.UserID, |
| 49 | + ExpiresAt: data.TokenInfo.GetAccessCreateAt().Add(data.TokenInfo.GetAccessExpiresIn()).Unix(), |
| 50 | + }, |
| 51 | + } |
| 52 | + |
| 53 | + token := jwt.NewWithClaims(a.SignedMethod, claims) |
| 54 | + var key interface{} |
| 55 | + if a.isEs() { |
| 56 | + v, err := jwt.ParseECPrivateKeyFromPEM(a.SignedKey) |
| 57 | + if err != nil { |
| 58 | + return "", "", err |
| 59 | + } |
| 60 | + key = v |
| 61 | + } else if a.isRsOrPS() { |
| 62 | + v, err := jwt.ParseRSAPrivateKeyFromPEM(a.SignedKey) |
| 63 | + if err != nil { |
| 64 | + return "", "", err |
| 65 | + } |
| 66 | + key = v |
| 67 | + } else if a.isHs() { |
| 68 | + key = a.SignedKey |
| 69 | + } else { |
| 70 | + return "", "", errs.New("unsupported sign method") |
| 71 | + } |
| 72 | + |
| 73 | + access, err := token.SignedString(key) |
| 74 | + if err != nil { |
| 75 | + return "", "", err |
| 76 | + } |
| 77 | + refresh := "" |
| 78 | + |
| 79 | + if isGenRefresh { |
| 80 | + refresh = base64.URLEncoding.EncodeToString(uuid.NewSHA1(uuid.Must(uuid.NewRandom()), []byte(access)).Bytes()) |
| 81 | + refresh = strings.ToUpper(strings.TrimRight(refresh, "=")) |
| 82 | + } |
| 83 | + |
| 84 | + return access, refresh, nil |
| 85 | +} |
| 86 | + |
| 87 | +func (a *JWTAccessGenerate) isEs() bool { |
| 88 | + return strings.HasPrefix(a.SignedMethod.Alg(), "ES") |
| 89 | +} |
| 90 | + |
| 91 | +func (a *JWTAccessGenerate) isRsOrPS() bool { |
| 92 | + isRs := strings.HasPrefix(a.SignedMethod.Alg(), "RS") |
| 93 | + isPs := strings.HasPrefix(a.SignedMethod.Alg(), "PS") |
| 94 | + return isRs || isPs |
| 95 | +} |
| 96 | + |
| 97 | +func (a *JWTAccessGenerate) isHs() bool { |
| 98 | + return strings.HasPrefix(a.SignedMethod.Alg(), "HS") |
| 99 | +} |
0 commit comments