forked from TrueCloudLab/frostfs-http-gw
[#163] Support JSON bearer token
Signed-off-by: Roman Loginov <r.loginov@yadro.com>
This commit is contained in:
parent
a2f8cb6735
commit
3a0f78ed9f
2 changed files with 51 additions and 15 deletions
|
@ -82,14 +82,22 @@ func fetchBearerToken(ctx *fasthttp.RequestCtx) (*bearer.Token, error) {
|
||||||
tkn = new(bearer.Token)
|
tkn = new(bearer.Token)
|
||||||
)
|
)
|
||||||
for _, parse := range []fromHandler{BearerTokenFromHeader, BearerTokenFromCookie} {
|
for _, parse := range []fromHandler{BearerTokenFromHeader, BearerTokenFromCookie} {
|
||||||
if buf = parse(&ctx.Request.Header); buf == nil {
|
buf = parse(&ctx.Request.Header)
|
||||||
|
if buf == nil {
|
||||||
continue
|
continue
|
||||||
} else if data, err := base64.StdEncoding.DecodeString(string(buf)); err != nil {
|
}
|
||||||
|
|
||||||
|
data, err := base64.StdEncoding.DecodeString(string(buf))
|
||||||
|
if err != nil {
|
||||||
lastErr = fmt.Errorf("can't base64-decode bearer token: %w", err)
|
lastErr = fmt.Errorf("can't base64-decode bearer token: %w", err)
|
||||||
continue
|
continue
|
||||||
} else if err = tkn.Unmarshal(data); err != nil {
|
}
|
||||||
lastErr = fmt.Errorf("can't unmarshal bearer token: %w", err)
|
|
||||||
continue
|
if err = tkn.Unmarshal(data); err != nil {
|
||||||
|
if err = tkn.UnmarshalJSON(data); err != nil {
|
||||||
|
lastErr = fmt.Errorf("can't unmarshal bearer token: %w", err)
|
||||||
|
continue
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
return tkn, nil
|
return tkn, nil
|
||||||
|
|
|
@ -98,8 +98,14 @@ func TestFetchBearerToken(t *testing.T) {
|
||||||
tkn := new(bearer.Token)
|
tkn := new(bearer.Token)
|
||||||
tkn.ForUser(uid)
|
tkn.ForUser(uid)
|
||||||
|
|
||||||
t64 := base64.StdEncoding.EncodeToString(tkn.Marshal())
|
jsonToken, err := tkn.MarshalJSON()
|
||||||
require.NotEmpty(t, t64)
|
require.NoError(t, err)
|
||||||
|
|
||||||
|
jsonTokenBase64 := base64.StdEncoding.EncodeToString(jsonToken)
|
||||||
|
binaryTokenBase64 := base64.StdEncoding.EncodeToString(tkn.Marshal())
|
||||||
|
|
||||||
|
require.NotEmpty(t, jsonTokenBase64)
|
||||||
|
require.NotEmpty(t, binaryTokenBase64)
|
||||||
|
|
||||||
cases := []struct {
|
cases := []struct {
|
||||||
name string
|
name string
|
||||||
|
@ -143,25 +149,47 @@ func TestFetchBearerToken(t *testing.T) {
|
||||||
error: "can't unmarshal bearer token",
|
error: "can't unmarshal bearer token",
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "bad header, but good cookie",
|
name: "bad header, but good cookie with binary token",
|
||||||
header: "dGVzdAo=",
|
header: "dGVzdAo=",
|
||||||
cookie: t64,
|
cookie: binaryTokenBase64,
|
||||||
expect: tkn,
|
expect: tkn,
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "bad cookie, but good header",
|
name: "bad cookie, but good header with binary token",
|
||||||
header: t64,
|
header: binaryTokenBase64,
|
||||||
cookie: "dGVzdAo=",
|
cookie: "dGVzdAo=",
|
||||||
expect: tkn,
|
expect: tkn,
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "ok for header",
|
name: "bad header, but good cookie with binary token",
|
||||||
header: t64,
|
header: "dGVzdAo=",
|
||||||
|
cookie: jsonTokenBase64,
|
||||||
expect: tkn,
|
expect: tkn,
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
name: "ok for cookie",
|
name: "bad cookie, but good header with binary token",
|
||||||
cookie: t64,
|
header: jsonTokenBase64,
|
||||||
|
cookie: "dGVzdAo=",
|
||||||
|
expect: tkn,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "ok for header with binary token",
|
||||||
|
header: binaryTokenBase64,
|
||||||
|
expect: tkn,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "ok for cookie with binary token",
|
||||||
|
cookie: binaryTokenBase64,
|
||||||
|
expect: tkn,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "ok for header with json token",
|
||||||
|
header: jsonTokenBase64,
|
||||||
|
expect: tkn,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
name: "ok for cookie with json token",
|
||||||
|
cookie: jsonTokenBase64,
|
||||||
expect: tkn,
|
expect: tkn,
|
||||||
},
|
},
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue