Backups/Mango
1
0
Fork 0
mirror of https://github.com/hkalexling/Mango.git synced 2026-03-20 00:00:48 -04:00
Code Issues Projects Releases Wiki Activity

Store token and callback URI in memory session

Browse Source
This commit is contained in:
Alex Ling
2020-06-07 16:18:34 +00:00
parent 12c3c3f356
commit de690fbf29
7 changed files with 40 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
src/handlers/auth_handler.cr
View File

@@ -21,18 +21,14 @@ class AuthHandler < Kemal::Handler
call_next env
end
def validate_cookie_token(env)
cookie = env.request.cookies.find do |c|
c.name == "token-#{Config.current.port}"
end
!cookie.nil? && @storage.verify_token cookie.value
def validate_token(env)
token = env.session.string? "token"
!token.nil? && @storage.verify_token token
end
def validate_cookie_token_admin(env)
cookie = env.request.cookies.find do |c|
c.name == "token-#{Config.current.port}"
end
!cookie.nil? && @storage.verify_admin cookie.value
def validate_token_admin(env)
token = env.session.string? "token"
!token.nil? && @storage.verify_admin token
end
def validate_auth_header(env)
@@ -42,7 +38,7 @@ class AuthHandler < Kemal::Handler
token = verify_user value
return false if token.nil?
set_token_cookie env, token
env.session.string "token", token
return true
end
end
@@ -57,7 +53,7 @@ class AuthHandler < Kemal::Handler
end
def handle_opds_auth(env)
if validate_cookie_token(env) || validate_auth_header(env)
if validate_token(env) || validate_auth_header(env)
call_next env
else
env.response.status_code = 401
@@ -69,12 +65,13 @@ class AuthHandler < Kemal::Handler
def handle_auth(env)
return call_next(env) if request_path_startswith env, ["/login", "/logout"]
unless validate_cookie_token env
unless validate_token env
env.session.string "callback", env.request.path
return redirect env, "/login"
end
if request_path_startswith env, ["/admin", "/api/admin", "/download"]
unless validate_cookie_token_admin env
unless validate_token_admin env
env.response.status_code = 403
end
end