63 lines
1.7 KiB
Go
63 lines
1.7 KiB
Go
package nethttpoidc
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"net/http"
|
|
|
|
"code.icod.de/dalu/oidc"
|
|
"code.icod.de/dalu/oidc/options"
|
|
)
|
|
|
|
// New returns an OpenID Connect (OIDC) discovery handler (middleware)
|
|
// to be used with `net/http`, `mux` and `chi`.
|
|
func New(h http.Handler, setters ...options.Option) http.Handler {
|
|
oidcHandler, err := oidc.NewHandler(setters...)
|
|
if err != nil {
|
|
panic(fmt.Sprintf("oidc discovery: %v", err))
|
|
}
|
|
|
|
return toHttpHandler(h, oidcHandler.ParseToken, setters...)
|
|
}
|
|
|
|
func onError(w http.ResponseWriter, errorHandler options.ErrorHandler, statusCode int, description options.ErrorDescription, err error) {
|
|
if errorHandler != nil {
|
|
errorHandler(description, err)
|
|
}
|
|
|
|
w.WriteHeader(statusCode)
|
|
}
|
|
|
|
func toHttpHandler(h http.Handler, parseToken oidc.ParseTokenFunc, setters ...options.Option) http.Handler {
|
|
opts := options.New(setters...)
|
|
|
|
fn := func(w http.ResponseWriter, r *http.Request) {
|
|
ctx := r.Context()
|
|
|
|
tokenString, err := oidc.GetTokenString(r.Header.Get, opts.TokenString)
|
|
if err != nil {
|
|
onError(w, opts.ErrorHandler, http.StatusBadRequest, options.GetTokenErrorDescription, err)
|
|
return
|
|
}
|
|
|
|
token, err := parseToken(ctx, tokenString)
|
|
if err != nil {
|
|
onError(w, opts.ErrorHandler, http.StatusUnauthorized, options.ParseTokenErrorDescription, err)
|
|
return
|
|
}
|
|
|
|
tokenClaims, err := token.AsMap(ctx)
|
|
if err != nil {
|
|
onError(w, opts.ErrorHandler, http.StatusUnauthorized, options.ConvertTokenErrorDescription, err)
|
|
return
|
|
}
|
|
|
|
ctxWithClaims := context.WithValue(ctx, opts.ClaimsContextKeyName, tokenClaims)
|
|
reqWithClaims := r.WithContext(ctxWithClaims)
|
|
|
|
h.ServeHTTP(w, reqWithClaims)
|
|
}
|
|
|
|
return http.HandlerFunc(fn)
|
|
}
|