09afa579e4
- Added UpdateSessionLastAccessed method to update session access time. - Enhanced Authenticate method to support both session cookie and JWT token authentication. - Introduced AuthResult struct to encapsulate authentication results. - Added SetUserInContext function to simplify context management for authenticated users. refactor(auth): streamline gRPC and HTTP authentication - Removed gRPC authentication interceptor and replaced it with a unified approach using GatewayAuthMiddleware for HTTP requests. - Updated Connect interceptors to utilize the new authentication logic. - Consolidated public and admin-only method checks into service layer for better maintainability. chore(api): clean up unused code and improve documentation - Removed deprecated logger interceptor and unused gRPC server code. - Updated ACL configuration documentation for clarity on public and admin-only methods. - Enhanced metadata handling in Connect RPC to ensure consistent header access. fix(server): simplify server startup and shutdown process - Eliminated cmux dependency for handling HTTP and gRPC traffic. - Streamlined server initialization and shutdown logic for better performance and readability.
72 lines
2.2 KiB
Go
72 lines
2.2 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/usememos/memos/store"
|
|
)
|
|
|
|
// ContextKey is the key type for context values.
|
|
// Using a custom type prevents collisions with other packages.
|
|
type ContextKey int
|
|
|
|
const (
|
|
// UserIDContextKey stores the authenticated user's ID.
|
|
// Set for both session-based and token-based authentication.
|
|
// Use GetUserID(ctx) to retrieve this value.
|
|
UserIDContextKey ContextKey = iota
|
|
|
|
// SessionIDContextKey stores the session ID for session-based auth.
|
|
// Only set when authenticated via session cookie.
|
|
SessionIDContextKey
|
|
|
|
// AccessTokenContextKey stores the JWT token for token-based auth.
|
|
// Only set when authenticated via Bearer token.
|
|
AccessTokenContextKey
|
|
)
|
|
|
|
// GetUserID retrieves the authenticated user's ID from the context.
|
|
// Returns 0 if no user ID is set (unauthenticated request).
|
|
func GetUserID(ctx context.Context) int32 {
|
|
if v, ok := ctx.Value(UserIDContextKey).(int32); ok {
|
|
return v
|
|
}
|
|
return 0
|
|
}
|
|
|
|
// GetSessionID retrieves the session ID from the context.
|
|
// Returns empty string if not authenticated via session cookie.
|
|
func GetSessionID(ctx context.Context) string {
|
|
if v, ok := ctx.Value(SessionIDContextKey).(string); ok {
|
|
return v
|
|
}
|
|
return ""
|
|
}
|
|
|
|
// GetAccessToken retrieves the JWT access token from the context.
|
|
// Returns empty string if not authenticated via bearer token.
|
|
func GetAccessToken(ctx context.Context) string {
|
|
if v, ok := ctx.Value(AccessTokenContextKey).(string); ok {
|
|
return v
|
|
}
|
|
return ""
|
|
}
|
|
|
|
// SetUserInContext sets the authenticated user's information in the context.
|
|
// This is a simpler alternative to AuthorizeAndSetContext for cases where
|
|
// authorization is handled separately (e.g., HTTP middleware).
|
|
//
|
|
// Parameters:
|
|
// - user: The authenticated user
|
|
// - sessionID: Set if authenticated via session cookie (empty string otherwise)
|
|
// - accessToken: Set if authenticated via JWT token (empty string otherwise)
|
|
func SetUserInContext(ctx context.Context, user *store.User, sessionID, accessToken string) context.Context {
|
|
ctx = context.WithValue(ctx, UserIDContextKey, user.ID)
|
|
if sessionID != "" {
|
|
ctx = context.WithValue(ctx, SessionIDContextKey, sessionID)
|
|
}
|
|
if accessToken != "" {
|
|
ctx = context.WithValue(ctx, AccessTokenContextKey, accessToken)
|
|
}
|
|
return ctx
|
|
}
|