Function AuthFromAuthorizationHeader

pkg/middlewares/http/jwt.go:69–81

AuthFromAuthorizationHeader is a middleware that extracts the token from the authorization header and verifies it

(keyFunc jwt.Keyfunc, claimsFunc ClaimsFunc, signingMethod jwt.SigningMethod, next nhttp.Handler)

// AuthFromAuthorizationHeader is a middleware that extracts the token from the authorization header and verifies it
func AuthFromAuthorizationHeader(keyFunc jwt.Keyfunc, claimsFunc ClaimsFunc, signingMethod jwt.SigningMethod, next nhttp.Handler) nhttp.Handler {
	return nhttp.HandlerFunc(func(w http.ResponseWriter, r *nhttp.Request) {
		auths := strings.SplitN(r.Header.Get(authorizationKey), " ", 2)
		if len(auths) != 2 || !strings.EqualFold(auths[0], bearerWord) {
			nhttp.Error(w, "JWT token is missing", nhttp.StatusUnauthorized)
			return
		}

		jwtToken := auths[1]

		verifyJWTAndServeNext(w, r, jwtToken, keyFunc, claimsFunc, signingMethod, next)
	})
}

// verifyAndMarshalJWT verifies the token and returns the map claims
func verifyAndMarshalJWT(token string, keyFunc jwt.Keyfunc, claimsFunc ClaimsFunc, signingMethod jwt.SigningMethod) (*jwt.Claims, error) {