auth.go (2404B)
1 // GoToSocial 2 // Copyright (C) GoToSocial Authors admin@gotosocial.org 3 // SPDX-License-Identifier: AGPL-3.0-or-later 4 // 5 // This program is free software: you can redistribute it and/or modify 6 // it under the terms of the GNU Affero General Public License as published by 7 // the Free Software Foundation, either version 3 of the License, or 8 // (at your option) any later version. 9 // 10 // This program is distributed in the hope that it will be useful, 11 // but WITHOUT ANY WARRANTY; without even the implied warranty of 12 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 // GNU Affero General Public License for more details. 14 // 15 // You should have received a copy of the GNU Affero General Public License 16 // along with this program. If not, see <http://www.gnu.org/licenses/>. 17 18 package api 19 20 import ( 21 "github.com/gin-gonic/gin" 22 "github.com/superseriousbusiness/gotosocial/internal/api/auth" 23 "github.com/superseriousbusiness/gotosocial/internal/db" 24 "github.com/superseriousbusiness/gotosocial/internal/gtsmodel" 25 "github.com/superseriousbusiness/gotosocial/internal/middleware" 26 "github.com/superseriousbusiness/gotosocial/internal/oidc" 27 "github.com/superseriousbusiness/gotosocial/internal/processing" 28 "github.com/superseriousbusiness/gotosocial/internal/router" 29 ) 30 31 type Auth struct { 32 routerSession *gtsmodel.RouterSession 33 sessionName string 34 35 auth *auth.Module 36 } 37 38 // Route attaches 'auth' and 'oauth' groups to the given router. 39 func (a *Auth) Route(r router.Router, m ...gin.HandlerFunc) { 40 // create groupings for the 'auth' and 'oauth' prefixes 41 authGroup := r.AttachGroup("auth") 42 oauthGroup := r.AttachGroup("oauth") 43 44 // instantiate + attach shared, non-global middlewares to both of these groups 45 var ( 46 cacheControlMiddleware = middleware.CacheControl("private", "max-age=120") 47 sessionMiddleware = middleware.Session(a.sessionName, a.routerSession.Auth, a.routerSession.Crypt) 48 ) 49 authGroup.Use(m...) 50 oauthGroup.Use(m...) 51 authGroup.Use(cacheControlMiddleware, sessionMiddleware) 52 oauthGroup.Use(cacheControlMiddleware, sessionMiddleware) 53 54 a.auth.RouteAuth(authGroup.Handle) 55 a.auth.RouteOauth(oauthGroup.Handle) 56 } 57 58 func NewAuth(db db.DB, p *processing.Processor, idp oidc.IDP, routerSession *gtsmodel.RouterSession, sessionName string) *Auth { 59 return &Auth{ 60 routerSession: routerSession, 61 sessionName: sessionName, 62 auth: auth.New(db, p, idp), 63 } 64 }