Method BasicAuthCheckMiddlewareWithHttp

server/auth/auth.go:161–203

(req *http.Request, writer http.ResponseWriter)

}

func (a *AuthMiddleware) BasicAuthCheckMiddlewareWithHttp(req *http.Request, writer http.ResponseWriter) (token *jwt.Token, err error) {
	token = nil
	authHeaderValue := req.Header.Get("Authorization")
	bearerValueParts := strings.Split(authHeaderValue, " ")
	if len(bearerValueParts) < 2 {
		return
	}

	tokenString := bearerValueParts[1]
	tokenValue, err := base64.StdEncoding.DecodeString(tokenString)
	if err != nil {
		return
	}
	tokenValueParts := strings.Split(string(tokenValue), ":")
	username := tokenValueParts[0]
	password := ""
	if len(tokenValueParts) > 1 {
		password = tokenValueParts[1]
	}
	transaction, err := a.db.Beginx()
	if err != nil {
		CheckErr(err, "Failed to begin transaction [168]")
		return
	}

	existingPasswordHash, err := a.userCrud.GetUserPassword(username, transaction)
	transaction.Rollback()
	if err != nil {
		return
	}

	if BcryptCheckStringHash(password, existingPasswordHash) {
		token = &jwt.Token{
			Claims: jwt.MapClaims{
				"name":  strings.Split(username, "@")[0],
				"email": username,
				"sub":   username,
			},
		}
	}

	return
}

func BcryptCheckStringHash(newString, hash string) bool {
	err := bcrypt.CompareHashAndPassword([]byte(hash), []byte(newString))