|
| 1 | +// package auth provide restful interface for authentication |
| 2 | +package auth |
| 3 | + |
| 4 | +import ( |
| 5 | + "context" |
| 6 | + "errors" |
| 7 | + "fmt" |
| 8 | + |
| 9 | + "github.com/golang-jwt/jwt/v4" |
| 10 | + "github.com/rest-go/rest/pkg/sql" |
| 11 | +) |
| 12 | + |
| 13 | +var primaryKeySQL = map[string]string{ |
| 14 | + "postgres": "BIGINT PRIMARY KEY GENERATED ALWAYS AS IDENTITY", |
| 15 | + "mysql": "BIGINT PRIMARY KEY AUTO_INCREMENT", |
| 16 | + "sqlite": "INTEGER PRIMARY KEY", |
| 17 | +} |
| 18 | + |
| 19 | +// GenJWTToken generate and return jwt token |
| 20 | +func GenJWTToken(secret []byte, data map[string]any) (string, error) { |
| 21 | + token := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims(data)) |
| 22 | + return token.SignedString(secret) |
| 23 | +} |
| 24 | + |
| 25 | +// ParseJWTToken parse tokenString and return data if token is valid |
| 26 | +func ParseJWTToken(secret []byte, tokenString string) (map[string]any, error) { |
| 27 | + token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) { |
| 28 | + // Don't forget to validate the alg is what you expect: |
| 29 | + if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok { |
| 30 | + return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"]) |
| 31 | + } |
| 32 | + return secret, nil |
| 33 | + }) |
| 34 | + if err != nil { |
| 35 | + return nil, err |
| 36 | + } |
| 37 | + |
| 38 | + if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid { |
| 39 | + return map[string]any(claims), nil |
| 40 | + } |
| 41 | + |
| 42 | + return nil, errors.New("invalid token") |
| 43 | +} |
| 44 | + |
| 45 | +// Setup setup database tables and create an admin user account |
| 46 | +func Setup(db *sql.DB) (username, password string, err error) { |
| 47 | + if isSetupDone(db) { |
| 48 | + err = errors.New("setup is already done before") |
| 49 | + return |
| 50 | + } |
| 51 | + username, password, err = setupUsers(db) |
| 52 | + if err != nil { |
| 53 | + return |
| 54 | + } |
| 55 | + err = setupPolicies(db) |
| 56 | + return |
| 57 | +} |
| 58 | + |
| 59 | +func isSetupDone(db *sql.DB) bool { |
| 60 | + ctx, cancel := context.WithTimeout(context.Background(), sql.DefaultTimeout) |
| 61 | + defer cancel() |
| 62 | + _, err := db.ExecQuery(ctx, "SELECT 1 FROM auth_users") |
| 63 | + return err == nil |
| 64 | +} |
0 commit comments