-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathjwt.go
147 lines (122 loc) · 2.8 KB
/
jwt.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
package jwt
import (
"strings"
"gopkg.in/jwt.v1/crypto"
"gopkg.in/jwt.v1/util"
)
const (
TOKEN_HEADER = iota
TOKEN_CLAIMS
TOKEN_SIGN
TOKEN_MAX
)
type JWT interface {
Header() *Header
Claims() *Claims
}
type TokenString []string
type KeyByte []byte
type Token interface {
Verify() error
Claims() *Claims
Header() *Header
Serialize() (string, error)
SetKey(key interface{})
}
type token struct {
header *Header
claims *Claims
Token TokenString
key interface{}
}
//parse claims header parameters
func NewToken(v ...interface{}) Token {
token := new(token)
token.Token = make([]string, TOKEN_MAX)
if len(v) > 0 {
for _, v := range v {
switch v.(type) {
case *Claims:
token.claims = v.(*Claims)
token.Token[TOKEN_CLAIMS] = token.claims.Base64()
//case Claims:
// *token.claims = v.(Claims)
// token.Token[TOKEN_CLAIMS] = token.claims.Base64()
case *Header:
token.header = v.(*Header)
token.Token[TOKEN_HEADER] = token.header.Base64()
//case Header:
// *token.header = v.(Header)
// token.Token[TOKEN_HEADER] = token.header.Base64()
case []string:
token.Token = TokenString(v.([]string))
case TokenString:
token.Token = v.(TokenString)
default:
util.Debug("key",v)
token.key = v
}
}
}
return token
}
func ParseToken(serialized string, key interface{}) (Token, error) {
util.Debug("ParseToken")
var err error
token := stringSegment(serialized)
header, err := ParseHeader(token[TOKEN_HEADER])
if err != nil {
return nil, err
}
util.Debug(header)
claims, err := ParseClaims(token[TOKEN_CLAIMS])
if err != nil {
return nil, err
}
util.Debug(claims)
t := NewToken(header, claims, token, key)
if err = t.Verify(); err != nil {
return nil, err
}
util.Debug(t)
return t, nil
}
func (t *token) Verify() error {
raw := stringConnection(t.Token[TOKEN_HEADER], t.Token[TOKEN_CLAIMS])
f, err := crypto.GetSigningFunc(t.header.Alg())
if err != nil {
return err
}
err = f.Verify(t.Token[TOKEN_SIGN], raw, t.key)
return err
}
func (t *token) Claims() *Claims {
return t.claims
}
func (t *token) Header() *Header {
return t.header
}
func (t *token) Serialize() (string, error) {
t.Token[TOKEN_HEADER] = t.header.Base64()
t.Token[TOKEN_CLAIMS] = t.claims.Base64()
raw := stringConnection(t.Token[TOKEN_HEADER], t.Token[TOKEN_CLAIMS])
f, err := crypto.GetSigningFunc(t.header.Alg())
if err != nil {
return "", err
}
sign, err := f.Sign(raw, t.key)
if err != nil {
return "", err
}
t.Token[TOKEN_SIGN] = sign
return stringConnection(t.Token[TOKEN_HEADER], t.Token[TOKEN_CLAIMS], t.Token[TOKEN_SIGN]), nil
}
func (t *token) SetKey(key interface{}) {
t.key = key
}
func stringConnection(s ...string) string {
return strings.Join(s, ".")
}
func stringSegment(s string) []string {
return strings.Split(s, ".")
}