Function authToken

shock-server/auth/oauth/oauth.go:56–98

authToken validiates token by fetching user information.

(token string, url string)

// authToken validiates token by fetching user information.
func authToken(token string, url string) (u *user.User, err error) {
	client := &http.Client{
		Transport: &http.Transport{TLSClientConfig: &tls.Config{InsecureSkipVerify: true}},
	}
	req, err := http.NewRequest("GET", url, nil)
	if err != nil {
		return nil, errors.New("(oauth) HTTP GET: " + err.Error())
	}
	req.Header.Add("Auth", token)
	if resp, err := client.Do(req); err == nil {
		defer resp.Body.Close()
		if resp.StatusCode == http.StatusOK {
			if body, err := ioutil.ReadAll(resp.Body); err == nil {
				u = &user.User{}
				c := &credentials{}
				if err = json.Unmarshal(body, &c); err != nil {
					return nil, errors.New("(oauth) JSON Unmarshal: " + err.Error())
				} else {
					if c.Uname == "" {
						return nil, errors.New("(oauth) " + e.InvalidAuth)
					}
					u.Username = c.Uname
					if c.Name != "" {
						u.Fullname = c.Name
					} else {
						u.Fullname = c.Fname + " " + c.Lname
					}
					u.Email = c.Email
					if err = u.SetMongoInfo(); err != nil {
						return nil, errors.New("(oauth) MongoDB: " + err.Error())
					}
				}
			}
		} else if resp.StatusCode == http.StatusForbidden {
			return nil, errors.New("(oauth) " + e.InvalidAuth)
		} else {
			return nil, errors.New("(oauth) Authentication failed: Unexpected response status: " + resp.Status)
		}
	} else {
		return nil, errors.New("(oauth) " + err.Error())
	}
	return
}