jwtperm

Documentation

Overview

Package jwtperm delivers and checks the JWT permissions

Index

• Constants
• Variables
• type Checker
  • func New(urls []*url.URL, resErr reserr.ResErr, secretKey []byte, ...) *Checker
  • func (ck *Checker) Chk(next http.Handler) http.Handler
  • func (ck *Checker) Set(next http.Handler) http.Handler
  • func (ck *Checker) Vet(next http.Handler) http.Handler
• type Perm
  • func FromCtx(r *http.Request) Perm

Constants

const (
	HTTP  = "http"
	HTTPS = "https"
)

Variables

var (
	ErrUnauthorized  = errors.New("JWT not authorized")
	ErrNoTokenFound  = errors.New("no JWT found")
	ErrInvalidCookie = errors.New("invalid cookie")
	ErrExpiredToken  = errors.New("expired or invalid refresh token")
)

Types

type Checker

type Checker struct {
	// contains filtered or unexported fields
}

func New

func New(urls []*url.URL, resErr reserr.ResErr, secretKey []byte, permissions ...interface{}) *Checker

func (*Checker) Chk

func (ck *Checker) Chk(next http.Handler) http.Handler

Chk accepts the HTTP request only if it contains a valid cookie.

func (*Checker) Set

func (ck *Checker) Set(next http.Handler) http.Handler

Set puts a HttpOnly cookie when no valid cookie is present in the HTTP response header. The permission conveyied by te cookie is also put in the request context.

func (*Checker) Vet

func (ck *Checker) Vet(next http.Handler) http.Handler

Vet accepts the HTTP request only if a valid JWT is in the cookie or in the first "Authorization" header.

type Perm

type Perm struct {
	Value int
}

func FromCtx

func FromCtx(r *http.Request) Perm

FromCtx gets the permission information from the request context.