nethttpoidc/http.go

73 lines
1.9 KiB
Go

package nethttpoidc
import (
"context"
"fmt"
"net/http"
"code.icod.de/dalu/oidc"
"code.icod.de/dalu/oidc/options"
"github.com/davecgh/go-spew/spew"
)
// New returns an OpenID Connect (OIDC) discovery handler (middleware)
// to be used with `net/http`, `mux` and `chi`.
func New(h http.Handler, setters ...options.Option) http.Handler {
oidcHandler, err := oidc.NewHandler(setters...)
if err != nil {
panic(fmt.Sprintf("oidc discovery: %v", err))
}
return toHttpHandler(h, oidcHandler.ParseToken, setters...)
}
func onError(w http.ResponseWriter, errorHandler options.ErrorHandler, statusCode int, description options.ErrorDescription, err error) {
if errorHandler != nil {
errorHandler(description, err)
}
w.WriteHeader(statusCode)
}
func toHttpHandler(h http.Handler, parseToken oidc.ParseTokenFunc, setters ...options.Option) http.Handler {
opts := options.New(setters...)
fn := func(w http.ResponseWriter, r *http.Request) {
ctx := r.Context()
tokenString, err := oidc.GetTokenString(r.Header.Get, opts.TokenString)
if err != nil {
if !opts.Permissive {
onError(w, opts.ErrorHandler, http.StatusBadRequest, options.GetTokenErrorDescription, err)
return
} else {
h.ServeHTTP(w, r)
return
}
}
token, err := parseToken(ctx, tokenString)
if err != nil {
fmt.Println("parseToken error")
spew.Dump(err)
onError(w, opts.ErrorHandler, http.StatusUnauthorized, options.ParseTokenErrorDescription, err)
return
}
tokenClaims, err := token.AsMap(ctx)
if err != nil {
fmt.Println("tokenClaims error")
spew.Dump(err)
onError(w, opts.ErrorHandler, http.StatusUnauthorized, options.ConvertTokenErrorDescription, err)
return
}
ctxWithClaims := context.WithValue(ctx, opts.ClaimsContextKeyName, tokenClaims)
reqWithClaims := r.WithContext(ctxWithClaims)
h.ServeHTTP(w, reqWithClaims)
}
return http.HandlerFunc(fn)
}