123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081 |
- package request
- import (
- "errors"
- "net/http"
- )
- // Errors
- var (
- ErrNoTokenInRequest = errors.New("no token present in request")
- )
- // Interface for extracting a token from an HTTP request.
- // The ExtractToken method should return a token string or an error.
- // If no token is present, you must return ErrNoTokenInRequest.
- type Extractor interface {
- ExtractToken(*http.Request) (string, error)
- }
- // Extractor for finding a token in a header. Looks at each specified
- // header in order until there's a match
- type HeaderExtractor []string
- func (e HeaderExtractor) ExtractToken(req *http.Request) (string, error) {
- // loop over header names and return the first one that contains data
- for _, header := range e {
- if ah := req.Header.Get(header); ah != "" {
- return ah, nil
- }
- }
- return "", ErrNoTokenInRequest
- }
- // Extract token from request arguments. This includes a POSTed form or
- // GET URL arguments. Argument names are tried in order until there's a match.
- // This extractor calls `ParseMultipartForm` on the request
- type ArgumentExtractor []string
- func (e ArgumentExtractor) ExtractToken(req *http.Request) (string, error) {
- // Make sure form is parsed
- req.ParseMultipartForm(10e6)
- // loop over arg names and return the first one that contains data
- for _, arg := range e {
- if ah := req.Form.Get(arg); ah != "" {
- return ah, nil
- }
- }
- return "", ErrNoTokenInRequest
- }
- // Tries Extractors in order until one returns a token string or an error occurs
- type MultiExtractor []Extractor
- func (e MultiExtractor) ExtractToken(req *http.Request) (string, error) {
- // loop over header names and return the first one that contains data
- for _, extractor := range e {
- if tok, err := extractor.ExtractToken(req); tok != "" {
- return tok, nil
- } else if err != ErrNoTokenInRequest {
- return "", err
- }
- }
- return "", ErrNoTokenInRequest
- }
- // Wrap an Extractor in this to post-process the value before it's handed off.
- // See AuthorizationHeaderExtractor for an example
- type PostExtractionFilter struct {
- Extractor
- Filter func(string) (string, error)
- }
- func (e *PostExtractionFilter) ExtractToken(req *http.Request) (string, error) {
- if tok, err := e.Extractor.ExtractToken(req); tok != "" {
- return e.Filter(tok)
- } else {
- return "", err
- }
- }
|