77 lines
2 KiB
Go
77 lines
2 KiB
Go
package server
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"net/mail"
|
|
"orblivion/lbry-id/auth"
|
|
"orblivion/lbry-id/store"
|
|
)
|
|
|
|
// DeviceId is decided by the device. UserId is decided by the server, and is
|
|
// gatekept by Email/Password
|
|
type AuthRequest struct {
|
|
DeviceId auth.DeviceId `json:"deviceId"`
|
|
Email auth.Email `json:"email"`
|
|
Password auth.Password `json:"password"`
|
|
}
|
|
|
|
// TODO - validate funcs probably should return error rather than bool for
|
|
// idiomatic golang
|
|
func (r *AuthRequest) validate() bool {
|
|
e, err := mail.ParseAddress(string(r.Email))
|
|
if err != nil {
|
|
return false
|
|
}
|
|
// "Joe <joe@example.com>" is valid according to ParseAddress. Likewise
|
|
// " joe@example.com". Etc. We only want the exact address, "joe@example.com"
|
|
// to be valid. ParseAddress will extract the exact address as e.Address. So
|
|
// we'll take the input email, put it through ParseAddress, see if it parses
|
|
// successfully, and then compare the input email to e.Address to make sure
|
|
// that it was an exact address to begin with.
|
|
if string(r.Email) != e.Address {
|
|
return false
|
|
}
|
|
|
|
return (r.DeviceId != "" && r.Password != auth.Password(""))
|
|
}
|
|
|
|
func (s *Server) getAuthToken(w http.ResponseWriter, req *http.Request) {
|
|
var authRequest AuthRequest
|
|
if !getPostData(w, req, &authRequest) {
|
|
return
|
|
}
|
|
|
|
userId, err := s.store.GetUserId(authRequest.Email, authRequest.Password)
|
|
if err == store.ErrNoUId {
|
|
errorJson(w, http.StatusUnauthorized, "No match for email and password")
|
|
return
|
|
}
|
|
if err != nil {
|
|
internalServiceErrorJson(w, err, "Error getting User Id")
|
|
return
|
|
}
|
|
|
|
authToken, err := s.auth.NewToken(userId, authRequest.DeviceId, auth.ScopeFull)
|
|
|
|
if err != nil {
|
|
internalServiceErrorJson(w, err, "Error generating auth token")
|
|
return
|
|
}
|
|
|
|
response, err := json.Marshal(&authToken)
|
|
|
|
if err != nil {
|
|
internalServiceErrorJson(w, err, "Error generating auth token")
|
|
return
|
|
}
|
|
|
|
if err := s.store.SaveToken(authToken); err != nil {
|
|
internalServiceErrorJson(w, err, "Error saving auth token")
|
|
return
|
|
}
|
|
|
|
fmt.Fprintf(w, string(response))
|
|
}
|