authmiddleware

README

authmiddleware

Validating JWT tokens with BYU's implementation of WSO2 isn't the easiest thing on the planet. We wanted to make sure that we protected every route with a JWT check and, as part of that check, pull in the latest signing key.

Installation

go get github.com/byuoitav/authmiddleware

Example Usage

import "github.com/byuoitav/authmiddleware"

func main() {
	router := echo.New()
	router.Use(echo.WrapMiddleware(authmiddleware.ValidateJWT))

	router.Start()
}

Local Development

The WSO2 JWT checking "pipeline" will not work from your local box. To enable local development without headaches, be sure to set the LOCAL_ENVIRONMENT variable in you shell environment.

Example (using /etc/environment):

export LOCAL_ENVIRONMENT="true"

Documentation

Index

• func Authenticate(next http.Handler) http.Handler
• func AuthenticateUser(next http.Handler) http.Handler
• func MachineChecks(request *http.Request, user bool) (bool, error)
• func PassActiveDirectory(user string, control []string) bool

Functions

func Authenticate

func Authenticate(next http.Handler) http.Handler

Authenticate is the generalized middleware function No CAS check for non-user access

func AuthenticateUser

func AuthenticateUser(next http.Handler) http.Handler

AuthenticateUser is the middleware function for user access.

func MachineChecks

func MachineChecks(request *http.Request, user bool) (bool, error)

MachineChecks is a boolean function for the standard automated checks that need to pass for any request.

func PassActiveDirectory

func PassActiveDirectory(user string, control []string) bool

PassActiveDirectory is the check for a user's Active Directory groups against some control groups to allow access based on the needs for the request.