master
parent
7d77373168
commit
9e80f60a59
19 changed files with 501 additions and 839 deletions
@ -0,0 +1,37 @@ |
|||||||
|
package jwt |
||||||
|
|
||||||
|
import "golang.org/x/net/context" |
||||||
|
|
||||||
|
type userIdKey struct{} |
||||||
|
type authKey struct{} |
||||||
|
type needAuthKey struct{} |
||||||
|
|
||||||
|
func SetUserContext(ctx context.Context, user *UserInfo) context.Context { |
||||||
|
return context.WithValue(ctx, userIdKey{}, user) |
||||||
|
} |
||||||
|
func FromUserContext(ctx context.Context) (user *UserInfo, ok bool) { |
||||||
|
user, ok = ctx.Value(userIdKey{}).(*UserInfo) |
||||||
|
return |
||||||
|
} |
||||||
|
|
||||||
|
func SetAuthKeyContext(ctx context.Context, key string) context.Context { |
||||||
|
return context.WithValue(ctx, authKey{}, key) |
||||||
|
} |
||||||
|
func FromAuthKeyContext(ctx context.Context) string { |
||||||
|
v := ctx.Value(authKey{}) |
||||||
|
if v == nil { |
||||||
|
return "" |
||||||
|
} |
||||||
|
return v.(string) |
||||||
|
} |
||||||
|
|
||||||
|
func SetNeedAuthContext(ctx context.Context, auth bool) context.Context { |
||||||
|
return context.WithValue(ctx, needAuthKey{}, auth) |
||||||
|
} |
||||||
|
func FromNeedAuthContext(ctx context.Context) bool { |
||||||
|
v := ctx.Value(needAuthKey{}) |
||||||
|
if v == nil { |
||||||
|
return false |
||||||
|
} |
||||||
|
return v.(bool) |
||||||
|
} |
||||||
@ -0,0 +1,62 @@ |
|||||||
|
package jwt |
||||||
|
|
||||||
|
import ( |
||||||
|
"context" |
||||||
|
"git.diulo.com/mogfee/kit/errors" |
||||||
|
"git.diulo.com/mogfee/kit/transport" |
||||||
|
"git.diulo.com/mogfee/kit/transport/http" |
||||||
|
"strings" |
||||||
|
) |
||||||
|
|
||||||
|
type jwtDefault struct { |
||||||
|
} |
||||||
|
|
||||||
|
func (j *jwtDefault) GetToken(ctx context.Context, key string) (tokenStr string) { |
||||||
|
arr := strings.Split(key, ":") |
||||||
|
if len(arr) != 2 { |
||||||
|
return "" |
||||||
|
} |
||||||
|
switch arr[0] { |
||||||
|
case "cookie": |
||||||
|
if tr, ok := transport.FromServerContext(ctx); ok { |
||||||
|
if tr1, ok := tr.(http.Transporter); ok { |
||||||
|
if co, err := tr1.Request().Cookie(arr[1]); err == nil { |
||||||
|
return co.Value |
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
|
case "header": |
||||||
|
if tr, ok := transport.FromServerContext(ctx); ok { |
||||||
|
return tr.RequestHeader().Get(arr[1]) |
||||||
|
} |
||||||
|
case "query": |
||||||
|
if tr, ok := transport.FromServerContext(ctx); ok { |
||||||
|
if ht, ok := tr.(http.Transporter); ok { |
||||||
|
return ht.Request().URL.Query().Get(arr[1]) |
||||||
|
} |
||||||
|
} |
||||||
|
} |
||||||
|
return "" |
||||||
|
} |
||||||
|
|
||||||
|
func (j *jwtDefault) ParseToken(ctx context.Context, key string, token string) (*UserInfo, error) { |
||||||
|
userInfo, err := Parse(key, token) |
||||||
|
if err != nil { |
||||||
|
return nil, err |
||||||
|
} |
||||||
|
return userInfo, nil |
||||||
|
} |
||||||
|
|
||||||
|
func (j *jwtDefault) Validate(ctx context.Context, permission string, permissions []string) error { |
||||||
|
allowPers := strings.Split(permission, "|") |
||||||
|
allowMap := make(map[string]bool, len(allowPers)) |
||||||
|
for _, v := range allowPers { |
||||||
|
allowMap[v] = true |
||||||
|
} |
||||||
|
for _, v := range permissions { |
||||||
|
if allowMap[v] { |
||||||
|
return nil |
||||||
|
} |
||||||
|
} |
||||||
|
return errors.Unauthorized("TOKEN_PERMISSION_BAD", "") |
||||||
|
} |
||||||
@ -1,126 +0,0 @@ |
|||||||
// Code generated by protoc-gen-go. DO NOT EDIT.
|
|
||||||
// versions:
|
|
||||||
// protoc-gen-go v1.28.1
|
|
||||||
// protoc v3.17.3
|
|
||||||
// source: auth.proto
|
|
||||||
|
|
||||||
package auth |
|
||||||
|
|
||||||
import ( |
|
||||||
protoreflect "google.golang.org/protobuf/reflect/protoreflect" |
|
||||||
protoimpl "google.golang.org/protobuf/runtime/protoimpl" |
|
||||||
descriptorpb "google.golang.org/protobuf/types/descriptorpb" |
|
||||||
reflect "reflect" |
|
||||||
) |
|
||||||
|
|
||||||
const ( |
|
||||||
// Verify that this generated code is sufficiently up-to-date.
|
|
||||||
_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion) |
|
||||||
// Verify that runtime/protoimpl is sufficiently up-to-date.
|
|
||||||
_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20) |
|
||||||
) |
|
||||||
|
|
||||||
var file_auth_proto_extTypes = []protoimpl.ExtensionInfo{ |
|
||||||
{ |
|
||||||
ExtendedType: (*descriptorpb.MethodOptions)(nil), |
|
||||||
ExtensionType: (*string)(nil), |
|
||||||
Field: 1111, |
|
||||||
Name: "auth.auth_key", |
|
||||||
Tag: "bytes,1111,opt,name=auth_key", |
|
||||||
Filename: "auth.proto", |
|
||||||
}, |
|
||||||
{ |
|
||||||
ExtendedType: (*descriptorpb.MethodOptions)(nil), |
|
||||||
ExtensionType: (*bool)(nil), |
|
||||||
Field: 1112, |
|
||||||
Name: "auth.auth", |
|
||||||
Tag: "varint,1112,opt,name=auth", |
|
||||||
Filename: "auth.proto", |
|
||||||
}, |
|
||||||
{ |
|
||||||
ExtendedType: (*descriptorpb.MethodOptions)(nil), |
|
||||||
ExtensionType: (*bool)(nil), |
|
||||||
Field: 1113, |
|
||||||
Name: "auth.auto_auth", |
|
||||||
Tag: "varint,1113,opt,name=auto_auth", |
|
||||||
Filename: "auth.proto", |
|
||||||
}, |
|
||||||
} |
|
||||||
|
|
||||||
// Extension fields to descriptorpb.MethodOptions.
|
|
||||||
var ( |
|
||||||
// 权限|分割多个权限
|
|
||||||
//
|
|
||||||
// optional string auth_key = 1111;
|
|
||||||
E_AuthKey = &file_auth_proto_extTypes[0] |
|
||||||
// 是否必须授权
|
|
||||||
//
|
|
||||||
// optional bool auth = 1112;
|
|
||||||
E_Auth = &file_auth_proto_extTypes[1] |
|
||||||
// 可以不授权
|
|
||||||
//
|
|
||||||
// optional bool auto_auth = 1113;
|
|
||||||
E_AutoAuth = &file_auth_proto_extTypes[2] |
|
||||||
) |
|
||||||
|
|
||||||
var File_auth_proto protoreflect.FileDescriptor |
|
||||||
|
|
||||||
var file_auth_proto_rawDesc = []byte{ |
|
||||||
0x0a, 0x0a, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x04, 0x61, 0x75, |
|
||||||
0x74, 0x68, 0x1a, 0x20, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, |
|
||||||
0x62, 0x75, 0x66, 0x2f, 0x64, 0x65, 0x73, 0x63, 0x72, 0x69, 0x70, 0x74, 0x6f, 0x72, 0x2e, 0x70, |
|
||||||
0x72, 0x6f, 0x74, 0x6f, 0x3a, 0x3a, 0x0a, 0x08, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x6b, 0x65, 0x79, |
|
||||||
0x12, 0x1e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, |
|
||||||
0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, |
|
||||||
0x18, 0xd7, 0x08, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x61, 0x75, 0x74, 0x68, 0x4b, 0x65, 0x79, |
|
||||||
0x3a, 0x33, 0x0a, 0x04, 0x61, 0x75, 0x74, 0x68, 0x12, 0x1e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, |
|
||||||
0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, |
|
||||||
0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0xd8, 0x08, 0x20, 0x01, 0x28, 0x08, 0x52, |
|
||||||
0x04, 0x61, 0x75, 0x74, 0x68, 0x3a, 0x3c, 0x0a, 0x09, 0x61, 0x75, 0x74, 0x6f, 0x5f, 0x61, 0x75, |
|
||||||
0x74, 0x68, 0x12, 0x1e, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, |
|
||||||
0x6f, 0x62, 0x75, 0x66, 0x2e, 0x4d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x4f, 0x70, 0x74, 0x69, 0x6f, |
|
||||||
0x6e, 0x73, 0x18, 0xd9, 0x08, 0x20, 0x01, 0x28, 0x08, 0x52, 0x08, 0x61, 0x75, 0x74, 0x6f, 0x41, |
|
||||||
0x75, 0x74, 0x68, 0x42, 0x2b, 0x5a, 0x29, 0x67, 0x69, 0x74, 0x2e, 0x64, 0x69, 0x75, 0x6c, 0x6f, |
|
||||||
0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x6d, 0x6f, 0x67, 0x66, 0x65, 0x65, 0x2f, 0x6b, 0x69, 0x74, 0x2f, |
|
||||||
0x74, 0x68, 0x69, 0x72, 0x64, 0x5f, 0x70, 0x61, 0x72, 0x74, 0x79, 0x2f, 0x61, 0x75, 0x74, 0x68, |
|
||||||
0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33, |
|
||||||
} |
|
||||||
|
|
||||||
var file_auth_proto_goTypes = []interface{}{ |
|
||||||
(*descriptorpb.MethodOptions)(nil), // 0: google.protobuf.MethodOptions
|
|
||||||
} |
|
||||||
var file_auth_proto_depIdxs = []int32{ |
|
||||||
0, // 0: auth.auth_key:extendee -> google.protobuf.MethodOptions
|
|
||||||
0, // 1: auth.auth:extendee -> google.protobuf.MethodOptions
|
|
||||||
0, // 2: auth.auto_auth:extendee -> google.protobuf.MethodOptions
|
|
||||||
3, // [3:3] is the sub-list for method output_type
|
|
||||||
3, // [3:3] is the sub-list for method input_type
|
|
||||||
3, // [3:3] is the sub-list for extension type_name
|
|
||||||
0, // [0:3] is the sub-list for extension extendee
|
|
||||||
0, // [0:0] is the sub-list for field type_name
|
|
||||||
} |
|
||||||
|
|
||||||
func init() { file_auth_proto_init() } |
|
||||||
func file_auth_proto_init() { |
|
||||||
if File_auth_proto != nil { |
|
||||||
return |
|
||||||
} |
|
||||||
type x struct{} |
|
||||||
out := protoimpl.TypeBuilder{ |
|
||||||
File: protoimpl.DescBuilder{ |
|
||||||
GoPackagePath: reflect.TypeOf(x{}).PkgPath(), |
|
||||||
RawDescriptor: file_auth_proto_rawDesc, |
|
||||||
NumEnums: 0, |
|
||||||
NumMessages: 0, |
|
||||||
NumExtensions: 3, |
|
||||||
NumServices: 0, |
|
||||||
}, |
|
||||||
GoTypes: file_auth_proto_goTypes, |
|
||||||
DependencyIndexes: file_auth_proto_depIdxs, |
|
||||||
ExtensionInfos: file_auth_proto_extTypes, |
|
||||||
}.Build() |
|
||||||
File_auth_proto = out.File |
|
||||||
file_auth_proto_rawDesc = nil |
|
||||||
file_auth_proto_goTypes = nil |
|
||||||
file_auth_proto_depIdxs = nil |
|
||||||
} |
|
||||||
Loading…
Reference in new issue