jwtperm

Documentation

Overview

Package jwtperm delivers and checks the JWT permissions

Index

• Constants
• Variables
• type Checker
  • func New(urls []*url.URL, resErr reserr.ResErr, secretKey []byte, ...) *Checker
  • func (ck *Checker) Chk(next http.Handler) http.Handler
  • func (ck *Checker) Set(next http.Handler) http.Handler
  • func (ck *Checker) Vet(next http.Handler) http.Handler
• type Perm
  • func From(r *http.Request) Perm
• type RefreshClaims

Constants

const (
	HTTP  = "http"
	HTTPS = "https"
)

Variables

var (
	ErrUnauthorized = errors.New("JWT not authorized")
	ErrNoTokenFound = errors.New("no JWT found")
)

Types

type Checker

type Checker struct {
	// contains filtered or unexported fields
}

func New

func New(urls []*url.URL, resErr reserr.ResErr, secretKey []byte, permissions ...interface{}) *Checker

func (*Checker) Chk

func (ck *Checker) Chk(next http.Handler) http.Handler

Chk accepts the HTTP request only it contains a valid Cookie.

func (*Checker) Set

func (ck *Checker) Set(next http.Handler) http.Handler

Set sets a HttpOnly cookie (if not present and valid) in the HTTP response header.

func (*Checker) Vet

func (ck *Checker) Vet(next http.Handler) http.Handler

Vet accepts the HTTP request only if a valid JWT is in the Cookie or in the first "Autorisation" header.

type Perm

type Perm struct {
	Value int
}

func From

func From(r *http.Request) Perm

From gets the permission information from the request context.

type RefreshClaims

type RefreshClaims struct {
	Namespace string `json:"n,omitempty"`
	UserName  string `json:"u,omitempty"`
	jwt.RegisteredClaims
}

RefreshClaims is the user refresh token.