jwtauth

JWT Auth Golang for Postgres

About this Project

The idea of the App is:

"An library to auth with jwt in golang with postgres".

Why?

This project is part of my personal portfolio, so, I'll be happy if you could provide me any feedback about the project, code, structure or anything that you can report that could make me a better developer!

Email-me: [email protected]

Connect with me at LinkedIn.

Functionalities

• Verify auth and generete a token object with 40 seconds expiration to manege access.

• Get a refreshed token.

Getting Started

Prerequisites

To run this project in the development mode, you'll need to have a basic environment to run:

• A Golang SDK, that can be found here.

Installing

Using lib

Config two tables into your database exactly like this!

$ go get github.com/booscaaa/jwt-auth

Config the file .env with .env.example

DB_HOST=
DB_USER=
DB_PASSWORD=
DB_NAME=
BCRYPT_HASH_SECRET=    #secret hash for reniew token
HASH_CRYPT=    #secret hash for JWT

Import lib

import (
    . "github.com/booscaaa/jwt-auth"
)

Call SessionCreate to create a valid session

func Create(writer http.ResponseWriter, r *http.Request) {
	if r.Method == "OPTIONS" {
		writer.WriteHeader(http.StatusOK)
	} else {
		var access Access
		if err := json.NewDecoder(r.Body).Decode(&access); err != nil {
			writer.WriteHeader(http.StatusInternalServerError)
			writer.Write([]byte("500 - Something bad happened!"))
		} else {
			defer r.Body.Close()
			SessionCreate(access, writer)
		}
	}
}

Call SessionRefresh to create new valid session

func Refresh(writer http.ResponseWriter, r *http.Request) {
	if r.Method == "OPTIONS" {
		writer.WriteHeader(http.StatusOK)
	} else {
		bearToken := r.Header.Get("Authorization")  // this bear token must be 4 params -- Bearer <token> <refreshCryptToken> <typeToken>
		SessionRefresh(bearToken, writer)
	}
}

Other methods in your API call this function before any function like this

bearToken := r.Header.Get("Authorization") // bear token must be 2 params -- Bearer <token>
if isAuth, access, := VerifyToken(bearToken); isAuth {
    // your implementation methods
} else {
    w.WriteHeader(http.StatusUnauthorized)
    w.Write([]byte("401 - Unauthorized!"))
}

Libs to build the application

• JWT - Library for golang jwt
• Env - To get .env file
• PQ - To get access to postgres database
• Map struct - To convert jwt claims to structs
• Crypto - To get a BCrypt hash to manege the token

You can send how many PR's do you want, I'll be glad to analyse and accept them! And if you have any question about the project...

Email-me: [email protected]

Connect with me at LinkedIn

Thank you!

License

This project is licensed under the MIT License - see the LICENSE.md file for details