forked from mirror/jwt
26 lines
610 B
Go
26 lines
610 B
Go
|
package request
|
||
|
|
|
||
|
|
import (
|
||
|
|
"strings"
|
||
|
|
)
|
||
|
|
|
||
|
|
// Extract Authorization header and strip 'Bearer ' from it
|
||
|
|
var AuthorizationHeaderExtractor = &PostExtractionFilter{
|
||
|
|
HeaderExtractor{"Authorization"},
|
||
|
|
func(tok string) (string, error) {
|
||
|
|
// Should be a bearer token
|
||
|
|
if len(tok) > 6 && strings.ToUpper(tok[0:7]) == "BEARER " {
|
||
|
|
return tok[7:], nil
|
||
|
|
}
|
||
|
|
return tok, nil
|
||
|
|
},
|
||
|
|
}
|
||
|
|
|
||
|
|
// Extractor for OAuth2 access tokens
|
||
|
|
var OAuth2Extractor = &MultiExtractor{
|
||
|
|
// Look for authorization token first
|
||
|
|
AuthorizationHeaderExtractor,
|
||
|
|
// Extract access_token from form or GET argument
|
||
|
|
&ArgumentExtractor{"access_token"},
|
||
|
|
}
|