flohoss/godash
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Refresh token if necessary

Browse source
This commit is contained in:
Florian Hoss 2024-09-16 17:37:57 +02:00
parent cd771677fc
commit 0aafb4b9a7
Signed by: flohoss
GPG key ID: 3F35C7F6E6F66F6B
1 changed files with 29 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
handlers/auth.handlers.go
View file

@ -49,6 +49,23 @@ func generateCodeChallenge(verifier string) string {
return base64.RawURLEncoding.EncodeToString(sha) return base64.RawURLEncoding.EncodeToString(sha)
} }
func (ah *AuthHandler) saveTokenToSession(r *http.Request, oauth2Token *oauth2.Token) {
ah.SessionManager.Put(r.Context(), "access_token", oauth2Token.AccessToken)
ah.SessionManager.Put(r.Context(), "refresh_token", oauth2Token.RefreshToken)
ah.SessionManager.Put(r.Context(), "token_type", oauth2Token.TokenType)
ah.SessionManager.Put(r.Context(), "expiry", oauth2Token.Expiry.Unix())
}
func (ah *AuthHandler) loadTokenFromSession(r *http.Request) *oauth2.Token {
ex := ah.SessionManager.GetInt64(r.Context(), "expiry")
return &oauth2.Token{
AccessToken: ah.SessionManager.GetString(r.Context(), "access_token"),
RefreshToken: ah.SessionManager.GetString(r.Context(), "refresh_token"),
TokenType: ah.SessionManager.GetString(r.Context(), "token_type"),
Expiry: time.Unix(ex, 0),
}
}
func NewAuthHandler(env *env.Config) *AuthHandler { func NewAuthHandler(env *env.Config) *AuthHandler {
ctx := context.Background() ctx := context.Background()
@ -80,7 +97,7 @@ func NewAuthHandler(env *env.Config) *AuthHandler {
} }
sessionManager := scs.New() sessionManager := scs.New()
sessionManager.Lifetime = 24 * time.Hour sessionManager.Lifetime = 24 * 31 * time.Hour
return &AuthHandler{ return &AuthHandler{
ctx: ctx, ctx: ctx,
@ -116,8 +133,7 @@ func (ah *AuthHandler) handleCallback(w http.ResponseWriter, r *http.Request) {
return return
} }
ah.SessionManager.Put(r.Context(), "access_token", oauth2Token.AccessToken) ah.saveTokenToSession(r, oauth2Token)
http.Redirect(w, r, "/", http.StatusFound) http.Redirect(w, r, "/", http.StatusFound)
} }
@ -134,19 +150,25 @@ func (ah *AuthHandler) handleLogin(w http.ResponseWriter, r *http.Request) {
func (ah *AuthHandler) AuthMiddleware(next http.Handler) http.Handler { func (ah *AuthHandler) AuthMiddleware(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
accessToken := ah.SessionManager.GetString(r.Context(), "access_token") exists := ah.SessionManager.Exists(r.Context(), "access_token")
if accessToken == "" { if !exists {
ah.handleLogin(w, r) ah.handleLogin(w, r)
return return
} }
userInfo, err := ah.oidcProvider.UserInfo(ah.ctx, oauth2.StaticTokenSource(&oauth2.Token{AccessToken: accessToken})) token := ah.loadTokenFromSession(r)
ah.oauth2Config.Client(ah.ctx, token)
tokenInfo, err := ah.oidcProvider.Verifier(&oidc.Config{ClientID: ah.oauth2Config.ClientID}).Verify(ah.ctx, token.AccessToken)
if err != nil { if err != nil {
ah.handleLogin(w, r) ah.handleLogin(w, r)
return return
} }
ah.saveTokenToSession(r, token)
var userClaims services.User var userClaims services.User
userInfo.Claims(&userClaims) tokenInfo.Claims(&userClaims)
w.Header().Set("X-User-Name", userClaims.Name) w.Header().Set("X-User-Name", userClaims.Name)
w.Header().Set("X-User-Email", userClaims.Email) w.Header().Set("X-User-Email", userClaims.Email)