961e841bd7
errs.Class should not contain "error" in the name, since that causes a
lot of stutter in the error logs. As an example a log line could end up
looking like:
ERROR node stats service error: satellitedbs error: node stats database error: no rows
Whereas something like:
ERROR nodestats service: satellitedbs: nodestatsdb: no rows
Would contain all the necessary information without the stutter.
Change-Id: I7b7cb7e592ebab4bcfadc1eef11122584d2b20e0
77 lines
1.8 KiB
Go
77 lines
1.8 KiB
Go
// Copyright (C) 2019 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package console
|
|
|
|
import (
|
|
"context"
|
|
"encoding/base64"
|
|
|
|
"github.com/zeebo/errs"
|
|
|
|
"storj.io/storj/satellite/console/consoleauth"
|
|
)
|
|
|
|
// TODO: change to JWT or Macaroon based auth
|
|
|
|
// Signer creates signature for provided data.
|
|
type Signer interface {
|
|
Sign(data []byte) ([]byte, error)
|
|
}
|
|
|
|
// signToken signs token with given signer.
|
|
func signToken(token *consoleauth.Token, signer Signer) error {
|
|
encoded := base64.URLEncoding.EncodeToString(token.Payload)
|
|
|
|
signature, err := signer.Sign([]byte(encoded))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
token.Signature = signature
|
|
return nil
|
|
}
|
|
|
|
// key is a context value key type.
|
|
type key int
|
|
|
|
// authKey is context key for Authorization.
|
|
const authKey key = 0
|
|
|
|
// requestKey is context key for Requests.
|
|
const requestKey key = 1
|
|
|
|
// ErrUnauthorized is error class for authorization related errors.
|
|
var ErrUnauthorized = errs.Class("unauthorized")
|
|
|
|
// Authorization contains auth info of authorized User.
|
|
type Authorization struct {
|
|
User User
|
|
Claims consoleauth.Claims
|
|
}
|
|
|
|
// WithAuth creates new context with Authorization.
|
|
func WithAuth(ctx context.Context, auth Authorization) context.Context {
|
|
return context.WithValue(ctx, authKey, auth)
|
|
}
|
|
|
|
// WithAuthFailure creates new context with authorization failure.
|
|
func WithAuthFailure(ctx context.Context, err error) context.Context {
|
|
return context.WithValue(ctx, authKey, err)
|
|
}
|
|
|
|
// GetAuth gets Authorization from context.
|
|
func GetAuth(ctx context.Context) (Authorization, error) {
|
|
value := ctx.Value(authKey)
|
|
|
|
if auth, ok := value.(Authorization); ok {
|
|
return auth, nil
|
|
}
|
|
|
|
if err, ok := value.(error); ok {
|
|
return Authorization{}, ErrUnauthorized.Wrap(err)
|
|
}
|
|
|
|
return Authorization{}, ErrUnauthorized.New(unauthorizedErrMsg)
|
|
}
|