mirror of
https://github.com/restic/restic.git
synced 2024-12-24 00:37:28 +00:00
114 lines
3.6 KiB
Go
114 lines
3.6 KiB
Go
package jwt_test
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/dgrijalva/jwt-go"
|
|
"time"
|
|
)
|
|
|
|
// Example (atypical) using the StandardClaims type by itself to parse a token.
|
|
// The StandardClaims type is designed to be embedded into your custom types
|
|
// to provide standard validation features. You can use it alone, but there's
|
|
// no way to retrieve other fields after parsing.
|
|
// See the CustomClaimsType example for intended usage.
|
|
func ExampleNewWithClaims_standardClaims() {
|
|
mySigningKey := []byte("AllYourBase")
|
|
|
|
// Create the Claims
|
|
claims := &jwt.StandardClaims{
|
|
ExpiresAt: 15000,
|
|
Issuer: "test",
|
|
}
|
|
|
|
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
|
|
ss, err := token.SignedString(mySigningKey)
|
|
fmt.Printf("%v %v", ss, err)
|
|
//Output: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE1MDAwLCJpc3MiOiJ0ZXN0In0.QsODzZu3lUZMVdhbO76u3Jv02iYCvEHcYVUI1kOWEU0 <nil>
|
|
}
|
|
|
|
// Example creating a token using a custom claims type. The StandardClaim is embedded
|
|
// in the custom type to allow for easy encoding, parsing and validation of standard claims.
|
|
func ExampleNewWithClaims_customClaimsType() {
|
|
mySigningKey := []byte("AllYourBase")
|
|
|
|
type MyCustomClaims struct {
|
|
Foo string `json:"foo"`
|
|
jwt.StandardClaims
|
|
}
|
|
|
|
// Create the Claims
|
|
claims := MyCustomClaims{
|
|
"bar",
|
|
jwt.StandardClaims{
|
|
ExpiresAt: 15000,
|
|
Issuer: "test",
|
|
},
|
|
}
|
|
|
|
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
|
|
ss, err := token.SignedString(mySigningKey)
|
|
fmt.Printf("%v %v", ss, err)
|
|
//Output: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJleHAiOjE1MDAwLCJpc3MiOiJ0ZXN0In0.HE7fK0xOQwFEr4WDgRWj4teRPZ6i3GLwD5YCm6Pwu_c <nil>
|
|
}
|
|
|
|
// Example creating a token using a custom claims type. The StandardClaim is embedded
|
|
// in the custom type to allow for easy encoding, parsing and validation of standard claims.
|
|
func ExampleParseWithClaims_customClaimsType() {
|
|
tokenString := "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJleHAiOjE1MDAwLCJpc3MiOiJ0ZXN0In0.HE7fK0xOQwFEr4WDgRWj4teRPZ6i3GLwD5YCm6Pwu_c"
|
|
|
|
type MyCustomClaims struct {
|
|
Foo string `json:"foo"`
|
|
jwt.StandardClaims
|
|
}
|
|
|
|
// sample token is expired. override time so it parses as valid
|
|
at(time.Unix(0, 0), func() {
|
|
token, err := jwt.ParseWithClaims(tokenString, &MyCustomClaims{}, func(token *jwt.Token) (interface{}, error) {
|
|
return []byte("AllYourBase"), nil
|
|
})
|
|
|
|
if claims, ok := token.Claims.(*MyCustomClaims); ok && token.Valid {
|
|
fmt.Printf("%v %v", claims.Foo, claims.StandardClaims.ExpiresAt)
|
|
} else {
|
|
fmt.Println(err)
|
|
}
|
|
})
|
|
|
|
// Output: bar 15000
|
|
}
|
|
|
|
// Override time value for tests. Restore default value after.
|
|
func at(t time.Time, f func()) {
|
|
jwt.TimeFunc = func() time.Time {
|
|
return t
|
|
}
|
|
f()
|
|
jwt.TimeFunc = time.Now
|
|
}
|
|
|
|
// An example of parsing the error types using bitfield checks
|
|
func ExampleParse_errorChecking() {
|
|
// Token from another example. This token is expired
|
|
var tokenString = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmb28iOiJiYXIiLCJleHAiOjE1MDAwLCJpc3MiOiJ0ZXN0In0.HE7fK0xOQwFEr4WDgRWj4teRPZ6i3GLwD5YCm6Pwu_c"
|
|
|
|
token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
|
|
return []byte("AllYourBase"), nil
|
|
})
|
|
|
|
if token.Valid {
|
|
fmt.Println("You look nice today")
|
|
} else if ve, ok := err.(*jwt.ValidationError); ok {
|
|
if ve.Errors&jwt.ValidationErrorMalformed != 0 {
|
|
fmt.Println("That's not even a token")
|
|
} else if ve.Errors&(jwt.ValidationErrorExpired|jwt.ValidationErrorNotValidYet) != 0 {
|
|
// Token is either expired or not active yet
|
|
fmt.Println("Timing is everything")
|
|
} else {
|
|
fmt.Println("Couldn't handle this token:", err)
|
|
}
|
|
} else {
|
|
fmt.Println("Couldn't handle this token:", err)
|
|
}
|
|
|
|
// Output: Timing is everything
|
|
}
|