auth

Documentation

Index

• Variables
• func GetIssuer(c echo.Context) string
• func OAuth2CallbackHandler(c echo.Context) error
• func OAuth2Handler(c echo.Context) error
• func RemoveToken(c echo.Context)
• func SetToken(c echo.Context, u *models.User) (token string, err error)

Variables

var LocalHandler = func(c echo.Context) error {
	p := new(localParams)

	if err := c.Bind(p); err != nil {
		return c.JSON(http.StatusBadRequest, err)
	}

	if err := common.Validate(p); err != nil {
		return c.JSON(http.StatusBadRequest, err)
	}

	users, err := models.Users(qm.Where("email = ?", p.Email)).AllG()

	if err != nil {
		return c.JSON(http.StatusInternalServerError, fmt.Sprintln(err))
	}

	if users == nil {
		return c.JSON(http.StatusUnauthorized, "Invalid credentials")
	}

	user := users[0]

	if user.Password.Ptr() == nil {
		return c.JSON(http.StatusUnauthorized, "Password not defined")
	}

	if ok := services.VerifyUserPassword(user, p.Password); !ok {
		return c.JSON(http.StatusUnauthorized, "Invalid credentials")
	}

	if user.Role == models.UserRoleDisable {
		return c.JSON(http.StatusUnauthorized, "Account disabled")
	}

	_, err = SetToken(c, user)

	if err != nil {
		return c.JSON(http.StatusInternalServerError, fmt.Sprintln(err))
	}

	return c.JSON(http.StatusOK, &respJSON{
		ID:          user.ID,
		Email:       user.Email,
		DisplayName: user.DisplayName,
		Picture:     user.Picture,
		Role:        user.Role,
	})
}

LocalHandler auth local

var LogoutHandler = func(c echo.Context) error {
	RemoveToken(c)

	return c.JSON(http.StatusOK, "ok")
}

LogoutHandler auth logout

var RegisterHandler = func(c echo.Context) error {
	p := new(registerParams)

	if err := c.Bind(p); err != nil {
		return c.JSON(http.StatusBadRequest, err)
	}

	if err := common.Validate(p); err != nil {
		return c.JSON(http.StatusBadRequest, err)
	}

	users, err := models.Users(qm.Where("email = ?", p.Email)).AllG()

	if err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	if users != nil {
		return c.JSON(http.StatusBadRequest, "Email already exists")
	}

	user := &models.User{
		Email: p.Email,
	}

	if err := services.SetUserPassword(user, p.Password); err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	err = user.InsertG(boil.Whitelist("email", "password", "token_version"))

	if err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	_, err = SetToken(c, user)

	if err != nil {
		return c.JSON(http.StatusInternalServerError, err)
	}

	return c.JSON(http.StatusOK, &respJSON{
		ID:          user.ID,
		Email:       user.Email,
		DisplayName: user.DisplayName,
		Picture:     user.Picture,
		Role:        user.Role,
	})
}

RegisterHandler auth local

Functions

func GetIssuer

func GetIssuer(c echo.Context) string

GetIssuer get issuer from context

func OAuth2CallbackHandler

func OAuth2CallbackHandler(c echo.Context) error

OAuth2CallbackHandler oauth2 callback

func OAuth2Handler

func OAuth2Handler(c echo.Context) error

OAuth2Handler redirect to permission

func RemoveToken

func RemoveToken(c echo.Context)

RemoveToken unset token from cookie

func SetToken

func SetToken(c echo.Context, u *models.User) (token string, err error)

SetToken set cookie token