84 lines
1.8 KiB
Go
84 lines
1.8 KiB
Go
package jwt
|
|
|
|
import (
|
|
"crypto/ed25519"
|
|
"os"
|
|
"strings"
|
|
"time"
|
|
|
|
"git.ostiwe.com/ostiwe-com/status/model"
|
|
"git.ostiwe.com/ostiwe-com/status/settings"
|
|
"github.com/go-chi/jwtauth/v5"
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/lestrrat-go/jwx/v2/jwa"
|
|
)
|
|
|
|
var (
|
|
signKey *ed25519.PrivateKey
|
|
publicSignKey *ed25519.PublicKey
|
|
signMethod jwt.SigningMethod
|
|
|
|
TokenAuth *jwtauth.JWTAuth
|
|
)
|
|
|
|
func init() {
|
|
jwtPublicKeyPath := os.Getenv("JWT_SIGN_PUBLIC_KEY_PATH")
|
|
if !strings.HasPrefix(jwtPublicKeyPath, "/") {
|
|
jwtPublicKeyPath = settings.WorkingDir + "/" + jwtPublicKeyPath
|
|
}
|
|
|
|
jwtPrivateKeyPath := os.Getenv("JWT_SIGN_PRIVATE_KEY_PATH")
|
|
if !strings.HasPrefix(jwtPrivateKeyPath, "/") {
|
|
jwtPrivateKeyPath = settings.WorkingDir + "/" + jwtPrivateKeyPath
|
|
}
|
|
|
|
publicFile, err := os.ReadFile(jwtPublicKeyPath)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
privateFile, err := os.ReadFile(jwtPrivateKeyPath)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
privateKey, err := jwt.ParseEdPrivateKeyFromPEM(privateFile)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
publicKey, err := jwt.ParseEdPublicKeyFromPEM(publicFile)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
pk, ok := privateKey.(ed25519.PrivateKey)
|
|
if !ok {
|
|
panic("invalid ed25519 private key")
|
|
}
|
|
|
|
k, ok := publicKey.(ed25519.PublicKey)
|
|
if !ok {
|
|
panic("invalid ed25519 public key")
|
|
}
|
|
|
|
signKey = &pk
|
|
publicSignKey = &k
|
|
signMethod = jwt.SigningMethodEdDSA
|
|
|
|
TokenAuth = jwtauth.New(string(jwa.EdDSA), signKey, publicSignKey)
|
|
}
|
|
|
|
func CreateByUser(user *model.User) (string, error) {
|
|
claims := NewClaims()
|
|
claims.Subject = user.Login
|
|
claims.UserID = user.ID
|
|
|
|
claims.IssuedAt = jwt.NewNumericDate(time.Now())
|
|
claims.ExpiresAt = jwt.NewNumericDate(time.Now().Add(time.Hour * 24 * 2))
|
|
|
|
token := jwt.NewWithClaims(signMethod, claims)
|
|
|
|
return token.SignedString(signKey)
|
|
}
|