57 lines
1.3 KiB
Go
57 lines
1.3 KiB
Go
package main
|
|
|
|
import (
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/bootdotdev/learn-file-storage-s3-golang-starter/internal/auth"
|
|
)
|
|
|
|
func (cfg *apiConfig) handlerRefresh(w http.ResponseWriter, r *http.Request) {
|
|
type response struct {
|
|
Token string `json:"token"`
|
|
}
|
|
|
|
refreshToken, err := auth.GetBearerToken(r.Header)
|
|
if err != nil {
|
|
respondWithError(w, http.StatusBadRequest, "Couldn't find token", err)
|
|
return
|
|
}
|
|
|
|
user, err := cfg.db.GetUserByRefreshToken(refreshToken)
|
|
if err != nil {
|
|
respondWithError(w, http.StatusUnauthorized, "Couldn't get user for refresh token", err)
|
|
return
|
|
}
|
|
|
|
accessToken, err := auth.MakeJWT(
|
|
user.ID,
|
|
cfg.jwtSecret,
|
|
time.Hour,
|
|
)
|
|
if err != nil {
|
|
respondWithError(w, http.StatusUnauthorized, "Couldn't validate token", err)
|
|
return
|
|
}
|
|
|
|
respondWithJSON(w, http.StatusOK, response{
|
|
Token: accessToken,
|
|
})
|
|
}
|
|
|
|
func (cfg *apiConfig) handlerRevoke(w http.ResponseWriter, r *http.Request) {
|
|
refreshToken, err := auth.GetBearerToken(r.Header)
|
|
if err != nil {
|
|
respondWithError(w, http.StatusBadRequest, "Couldn't find token", err)
|
|
return
|
|
}
|
|
|
|
err = cfg.db.RevokeRefreshToken(refreshToken)
|
|
if err != nil {
|
|
respondWithError(w, http.StatusInternalServerError, "Couldn't revoke session", err)
|
|
return
|
|
}
|
|
|
|
w.WriteHeader(http.StatusNoContent)
|
|
}
|