You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
75 lines
1.5 KiB
Go
75 lines
1.5 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"zero/core/collection"
|
|
"zero/core/stores/redis"
|
|
|
|
"google.golang.org/grpc/codes"
|
|
"google.golang.org/grpc/metadata"
|
|
"google.golang.org/grpc/status"
|
|
)
|
|
|
|
const defaultExpiration = 5 * time.Minute
|
|
|
|
type Authenticator struct {
|
|
store *redis.Redis
|
|
key string
|
|
cache *collection.Cache
|
|
strict bool
|
|
}
|
|
|
|
func NewAuthenticator(store *redis.Redis, key string, strict bool) (*Authenticator, error) {
|
|
cache, err := collection.NewCache(defaultExpiration)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &Authenticator{
|
|
store: store,
|
|
key: key,
|
|
cache: cache,
|
|
strict: strict,
|
|
}, nil
|
|
}
|
|
|
|
func (a *Authenticator) Authenticate(ctx context.Context) error {
|
|
md, ok := metadata.FromIncomingContext(ctx)
|
|
if !ok {
|
|
return status.Error(codes.Unauthenticated, missingMetadata)
|
|
}
|
|
|
|
apps, tokens := md[appKey], md[tokenKey]
|
|
if len(apps) == 0 || len(tokens) == 0 {
|
|
return status.Error(codes.Unauthenticated, missingMetadata)
|
|
}
|
|
|
|
app, token := apps[0], tokens[0]
|
|
if len(app) == 0 || len(token) == 0 {
|
|
return status.Error(codes.Unauthenticated, missingMetadata)
|
|
}
|
|
|
|
return a.validate(app, token)
|
|
}
|
|
|
|
func (a *Authenticator) validate(app, token string) error {
|
|
expect, err := a.cache.Take(app, func() (interface{}, error) {
|
|
return a.store.Hget(a.key, app)
|
|
})
|
|
if err != nil {
|
|
if a.strict {
|
|
return status.Error(codes.Internal, err.Error())
|
|
} else {
|
|
return nil
|
|
}
|
|
}
|
|
|
|
if token != expect {
|
|
return status.Error(codes.Unauthenticated, accessDenied)
|
|
}
|
|
|
|
return nil
|
|
}
|