initial

http.go

@@ -0,0 +1,62 @@
+package nethttpoidc
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+
+	"code.icod.de/dalu/oidc"
+	"code.icod.de/dalu/oidc/options"
+)
+
+// New returns an OpenID Connect (OIDC) discovery handler (middleware)
+// to be used with `net/http`, `mux` and `chi`.
+func New(h http.Handler, setters ...options.Option) http.Handler {
+	oidcHandler, err := oidc.NewHandler(setters...)
+	if err != nil {
+		panic(fmt.Sprintf("oidc discovery: %v", err))
+	}
+
+	return toHttpHandler(h, oidcHandler.ParseToken, setters...)
+}
+
+func onError(w http.ResponseWriter, errorHandler options.ErrorHandler, statusCode int, description options.ErrorDescription, err error) {
+	if errorHandler != nil {
+		errorHandler(description, err)
+	}
+
+	w.WriteHeader(statusCode)
+}
+
+func toHttpHandler(h http.Handler, parseToken oidc.ParseTokenFunc, setters ...options.Option) http.Handler {
+	opts := options.New(setters...)
+
+	fn := func(w http.ResponseWriter, r *http.Request) {
+		ctx := r.Context()
+
+		tokenString, err := oidc.GetTokenString(r.Header.Get, opts.TokenString)
+		if err != nil {
+			onError(w, opts.ErrorHandler, http.StatusBadRequest, options.GetTokenErrorDescription, err)
+			return
+		}
+
+		token, err := parseToken(ctx, tokenString)
+		if err != nil {
+			onError(w, opts.ErrorHandler, http.StatusUnauthorized, options.ParseTokenErrorDescription, err)
+			return
+		}
+
+		tokenClaims, err := token.AsMap(ctx)
+		if err != nil {
+			onError(w, opts.ErrorHandler, http.StatusUnauthorized, options.ConvertTokenErrorDescription, err)
+			return
+		}
+
+		ctxWithClaims := context.WithValue(ctx, opts.ClaimsContextKeyName, tokenClaims)
+		reqWithClaims := r.WithContext(ctxWithClaims)
+
+		h.ServeHTTP(w, reqWithClaims)
+	}
+
+	return http.HandlerFunc(fn)
+}