85 lines
2.1 KiB
Go
85 lines
2.1 KiB
Go
package admin
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"github.com/golang-jwt/jwt"
|
|
"github.com/grassrootseconomics/cic-go/meta"
|
|
"github.com/jackc/pgx/v4/pgxpool"
|
|
"github.com/labstack/echo/v4"
|
|
"github.com/nleof/goyesql"
|
|
)
|
|
|
|
type api struct {
|
|
db *pgxpool.Pool
|
|
q goyesql.Queries
|
|
m *meta.CicMeta
|
|
jwtKey []byte
|
|
}
|
|
|
|
func InitAdminApi(e *echo.Echo, db *pgxpool.Pool, queries goyesql.Queries, metaClient *meta.CicMeta, jwtKey string) {
|
|
api := newApi(db, queries, metaClient, jwtKey)
|
|
|
|
auth := e.Group(("/auth"))
|
|
g := e.Group("/admin")
|
|
|
|
auth.Use(api.dwCoreMiddleware)
|
|
auth.POST("/login", sendLoginJwtCookie)
|
|
auth.POST("/logout", sendLogoutCookie)
|
|
|
|
g.Use(api.dwCoreMiddleware)
|
|
g.Use(api.verifyAuthMiddleware)
|
|
|
|
g.GET("/check", isLoggedIn)
|
|
g.GET("/meta-proxy/:address", handleMetaProxy)
|
|
g.GET("/pin-status", handlePinStatus)
|
|
g.GET("/phone-2-address/:phone", handlePhone2Address)
|
|
g.GET("/address-2-phone/:address", handleAddress2Phone)
|
|
g.GET("/latest-transactions/:phone", handleLatestTransactions)
|
|
g.GET("/latest-transactions-by-token/:phone/:token", handleLatestTransactionsByToken)
|
|
}
|
|
|
|
func newApi(db *pgxpool.Pool, queries goyesql.Queries, metaClient *meta.CicMeta, jwtKey string) *api {
|
|
return &api{
|
|
db: db,
|
|
q: queries,
|
|
m: metaClient,
|
|
jwtKey: []byte(jwtKey),
|
|
}
|
|
}
|
|
|
|
func (a *api) dwCoreMiddleware(next echo.HandlerFunc) echo.HandlerFunc {
|
|
return func(c echo.Context) error {
|
|
c.Set("api", &api{
|
|
db: a.db,
|
|
q: a.q,
|
|
m: a.m,
|
|
jwtKey: a.jwtKey,
|
|
})
|
|
return next(c)
|
|
}
|
|
}
|
|
|
|
func (a *api) verifyAuthMiddleware(next echo.HandlerFunc) echo.HandlerFunc {
|
|
return func(c echo.Context) error {
|
|
cookie, err := c.Cookie("_ge_auth")
|
|
if err != nil {
|
|
return c.String(http.StatusForbidden, "auth cookie missing")
|
|
}
|
|
|
|
claims := &jwtClaims{}
|
|
|
|
token, err := jwt.ParseWithClaims(cookie.Value, claims, func(token *jwt.Token) (interface{}, error) {
|
|
return a.jwtKey, nil
|
|
})
|
|
if err != nil {
|
|
return c.String(http.StatusUnauthorized, "jwt validation failed")
|
|
}
|
|
if !token.Valid {
|
|
return c.String(http.StatusUnauthorized, "jwt invalid")
|
|
}
|
|
|
|
return next(c)
|
|
}
|
|
}
|