Method login

server/session.go:311–369

Authenticate

(msg *ClientComMessage)

// Authenticate
func (s *Session) login(msg *ClientComMessage) {
	var uid types.Uid
	var expires time.Time
	var err error

	if !s.uid.IsZero() {
		s.QueueOut(ErrAlreadyAuthenticated(msg.Login.Id, "", msg.timestamp))
		return

	} else if msg.Login.Scheme == "" || msg.Login.Scheme == "basic" {
		uid, err = store.Users.Login(s.appid, msg.Login.Scheme, msg.Login.Secret)
		if err != nil {
			// DB error
			log.Println(err)
			s.QueueOut(ErrUnknown(msg.Login.Id, "", msg.timestamp))
			return
		} else if uid.IsZero() {
			// Invalid login or password
			s.QueueOut(ErrAuthFailed(msg.Login.Id, "", msg.timestamp))
			return
		}
	} else if msg.Login.Scheme == "token" {
		if uid, expires = checkSecurityToken(msg.Login.Secret); uid.IsZero() {
			s.QueueOut(ErrAuthFailed(msg.Login.Id, "", msg.timestamp))
			return
		}
	} else {
		s.QueueOut(ErrAuthUnknownScheme(msg.Login.Id, "", msg.timestamp))
		return
	}

	s.uid = uid
	s.tag = msg.Login.Tag
	if s.tag == "" {
		s.tag = TAG_UNDEF
	}

	expireIn := time.Duration(msg.Login.ExpireIn)
	if expireIn <= 0 || expireIn > TOKEN_LIFETIME_MAX {
		expireIn = TOKEN_LIFETIME_DEFAULT
	}

	newExpires := time.Now().Add(expireIn).UTC().Round(time.Second)
	if !expires.IsZero() && expires.Before(newExpires) {
		newExpires = expires
	}
	params := map[string]interface{}{
		"uid":     uid.UserId(),
		"expires": newExpires,
		"token":   makeSecurityToken(uid, expires)}

	s.QueueOut(&ServerComMessage{Ctrl: &MsgServerCtrl{
		Id:        msg.Login.Id,
		Code:      http.StatusOK,
		Text:      http.StatusText(http.StatusOK),
		Timestamp: msg.timestamp,
		Params:    params}})