newsbot-portal/internal/handlers/util.go

package handlers

import (
	"errors"
	"net/http"
	"time"

	"git.jamestombleson.com/jtom38/newsbot-portal/internal/domain"
	"github.com/golang-jwt/jwt/v4"
	"github.com/labstack/echo/v4"
)

func SetCookie(c echo.Context, key, value, path string) {
	cookie := new(http.Cookie)
	cookie.Name = key
	cookie.Value = value
	if path != "" {
		cookie.Path = path
	}
	c.SetCookie(cookie)
}

type jwtToken struct {
	Exp        time.Time `json:"exp"`
	Iss        string    `json:"iss"`
	Authorized bool      `json:"authorized"`
	UserName   string    `json:"username"`
	Scopes     []string  `json:"scopes"`
	jwt.RegisteredClaims
}

func ValidateJwt(ctx echo.Context, sharedSecret, issuer string) (jwtToken, error) {
	cookie, err := ctx.Cookie(domain.CookieToken)
	if err != nil {
		return jwtToken{}, err
	}

	if cookie.Value == "" {
		return jwtToken{}, errors.New("JWT Bearer Token is missing")
	}

	token, err := jwt.ParseWithClaims(cookie.Value, &jwtToken{}, func(token *jwt.Token) (interface{}, error) {
		return []byte(sharedSecret), nil
	})
	if err != nil {
		return jwtToken{}, err
	}

	if !token.Valid {
		return jwtToken{}, errors.New("invalid jwt token")
	}

	claims := token.Claims.(*jwtToken)
	if !claims.Exp.After(time.Now()) {
		return jwtToken{}, errors.New("the jwt token has expired")
	}
	//if claims.Iss != issuer {
	//	return jwtToken{}, errors.New("the issuer was invalid")
	//}

	return *claims, nil
}