Leaf/framework_v2
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update auth.go

Browse Source
This commit is contained in:
Twilight 2024-07-15 21:40:38 +08:00
parent 8b1a7d0b5e
commit 134fa333ea
1 changed files with 17 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
internal/middleware/grpc/auth.go
View File

@ -2,13 +2,14 @@ package grpc
import ( import (
"context" "context"
"framework_v2/internal/providers/jwks"
"framework_v2/models"
"github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors/auth" "github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors/auth"
"github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors/logging" "github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors/logging"
"github.com/mitchellh/mapstructure" "github.com/mitchellh/mapstructure"
"google.golang.org/grpc/codes" "google.golang.org/grpc/codes"
"google.golang.org/grpc/status" "google.golang.org/grpc/status"
"leafdev.top/leaf/rag/consts"
"leafdev.top/leaf/rag/internal/providers/jwks"
"leafdev.top/leaf/rag/models"
) )
func JwtAuth(ctx context.Context) (context.Context, error) { func JwtAuth(ctx context.Context) (context.Context, error) {
@ -17,8 +18,8 @@ func JwtAuth(ctx context.Context) (context.Context, error) {
return nil, err return nil, err
} }
sub := "anonymous" sub := consts.AnonymousUser
var jwtIdToken *models.User var jwtIdToken = &models.User{}
if config.DebugMode.Enable { if config.DebugMode.Enable {
jwtIdToken.Token.Sub = sub jwtIdToken.Token.Sub = sub
@ -32,6 +33,18 @@ func JwtAuth(ctx context.Context) (context.Context, error) {
return nil, status.Errorf(codes.Unauthenticated, "unable get token sub: %v", err) return nil, status.Errorf(codes.Unauthenticated, "unable get token sub: %v", err)
} }
// 如果 token.Header 中没有 typ
if token.Header["typ"] == "" {
return nil, consts.ErrEmptyResponse
}
// must id token
if token.Header["typ"] != "id_token" {
return nil, consts.ErrTokenError
}
jwtIdToken.Valid = true
err = mapstructure.Decode(token.Claims, &jwtIdToken) err = mapstructure.Decode(token.Claims, &jwtIdToken)
if err != nil { if err != nil {
logger.Error("Failed to map token claims to JwtIDToken struct.\nError: " + err.Error()) logger.Error("Failed to map token claims to JwtIDToken struct.\nError: " + err.Error())