Function GetAuthFromReq

twitterv1/auth.go:139–329

GetAuthFromReq is a helper function to get the user DID and access token from the request. Also does some maintenance tasks like refreshing the access token if it has expired. @return: userDID, pds, tokenUUID, accessJwt, error

(c *fiber.Ctx)

//
// @return: userDID, pds, tokenUUID, accessJwt, error
func GetAuthFromReq(c *fiber.Ctx) (*string, *string, *string, *string, error) {
	authHeader := c.Get("Authorization")
	fallbackRoute := "https://public.api.bsky.app"
	if configData.DeveloperMode {
		fmt.Println("Auth Header:", authHeader)
	}
	var accessJwt, refreshJwt, userPDS, basicHashSalt, basicAuthSalt, basicUUID *string
	var userDID, tokenUUID, encryptionKey, basicAuthUsernamePassword, authPassword string
	var access_expiry, refresh_expiry *float64
	var err error

	isBasic := false
	nodid := ""
	notoken := ""
	var username string

	// Define a regular expression to match the oauth_token
	if strings.HasPrefix(authHeader, "Basic ") {
		// This really should be rewritten. If you can, send a PR :)
		isBasic = true
		// This is using basic authentication. Basic authentication, sucks. We have to somehow store the password, and i do not like that.
		// But if we want iOS 2, we have to do this.
		base64pass := strings.TrimPrefix(authHeader, "Basic ")
		var did *string
		basicAuthUsernamePassword, err = cryption.Base64URLDecode(base64pass)
		if err != nil {
			return &nodid, &fallbackRoute, nil, &notoken, err
		}

		// separate the username and password
		username = strings.Split(basicAuthUsernamePassword, ":")[0]
		authPassword = strings.Split(basicAuthUsernamePassword, ":")[1]

		accessJwt, refreshJwt, access_expiry, refresh_expiry, userPDS, did, basicHashSalt, basicAuthSalt, basicUUID, err = db_controller.GetTokenViaBasic(username, authPassword)
		fmt.Println(err)
		if err != nil {
			// We might just not be signed in.
			if err.Error() == "invalid credentials" {
				// test if password is an app password thru regex
				if !regexp.MustCompile(`^[a-zA-Z0-9]{4}-[a-zA-Z0-9]{4}-[a-zA-Z0-9]{4}-[a-zA-Z0-9]{4}$`).MatchString(authPassword) {
					return &nodid, &fallbackRoute, nil, &notoken, errors.New("invalid app password")
				}

				res, pds, err := blueskyapi.Authenticate(username, authPassword)
				if err != nil {
					return &nodid, &fallbackRoute, nil, &notoken, err
				}

				access_token_expiry, err := cryption.GetJWTTokenExpirationUnix(res.AccessJwt)
				if err != nil {
					return &nodid, &fallbackRoute, nil, &notoken, errors.New("failed to get access token expiry")
				}
				refresh_token_expiry, err := cryption.GetJWTTokenExpirationUnix(res.RefreshJwt)
				if err != nil {
					return &nodid, &fallbackRoute, nil, &notoken, errors.New("failed to get refresh token expiry")
				}

				_, err = db_controller.StoreTokenBasic(res.DID, *pds, res.AccessJwt, res.RefreshJwt, username, authPassword, *access_token_expiry, *refresh_token_expiry)