moshyfawn.dev
forked from
tangled.org/core
fork
Configure Feed
Select the types of activity you want to include in your feed.
Monorepo for Tangled
fork
Configure Feed
Select the types of activity you want to include in your feed.
anirudh.fi
1package session
2
3import (
4 "context"
5 "encoding/json"
6 "fmt"
7 "time"
8
9 "tangled.org/core/appview/cache"
10)
11
12type OAuthSession struct {
13 Handle string
14 Did string
15 PdsUrl string
16 AccessJwt string
17 RefreshJwt string
18 AuthServerIss string
19 DpopPdsNonce string
20 DpopAuthserverNonce string
21 DpopPrivateJwk string
22 Expiry string
23}
24
25type OAuthRequest struct {
26 AuthserverIss string
27 Handle string
28 State string
29 Did string
30 PdsUrl string
31 PkceVerifier string
32 DpopAuthserverNonce string
33 DpopPrivateJwk string
34 ReturnUrl string
35}
36
37type SessionStore struct {
38 cache *cache.Cache
39}
40
41const (
42 stateKey = "oauthstate:%s"
43 requestKey = "oauthrequest:%s"
44 sessionKey = "oauthsession:%s"
45)
46
47func New(cache *cache.Cache) *SessionStore {
48 return &SessionStore{cache: cache}
49}
50
51func (s *SessionStore) SaveSession(ctx context.Context, session OAuthSession) error {
52 key := fmt.Sprintf(sessionKey, session.Did)
53 data, err := json.Marshal(session)
54 if err != nil {
55 return err
56 }
57
58 // set with ttl (7 days)
59 ttl := 7 * 24 * time.Hour
60
61 return s.cache.Set(ctx, key, data, ttl).Err()
62}
63
64// SaveRequest stores the OAuth request to be later fetched in the callback. Since
65// the fetching happens by comparing the state we get in the callback params, we
66// store an additional state->did mapping which then lets us fetch the whole OAuth request.
67func (s *SessionStore) SaveRequest(ctx context.Context, request OAuthRequest) error {
68 key := fmt.Sprintf(requestKey, request.Did)
69 data, err := json.Marshal(request)
70 if err != nil {
71 return err
72 }
73
74 // oauth flow must complete within 30 minutes
75 err = s.cache.Set(ctx, key, data, 30*time.Minute).Err()
76 if err != nil {
77 return fmt.Errorf("error saving request: %w", err)
78 }
79
80 stateKey := fmt.Sprintf(stateKey, request.State)
81 err = s.cache.Set(ctx, stateKey, request.Did, 30*time.Minute).Err()
82 if err != nil {
83 return fmt.Errorf("error saving state->did mapping: %w", err)
84 }
85
86 return nil
87}
88
89func (s *SessionStore) GetSession(ctx context.Context, did string) (*OAuthSession, error) {
90 key := fmt.Sprintf(sessionKey, did)
91 val, err := s.cache.Get(ctx, key).Result()
92 if err != nil {
93 return nil, err
94 }
95
96 var session OAuthSession
97 err = json.Unmarshal([]byte(val), &session)
98 if err != nil {
99 return nil, err
100 }
101 return &session, nil
102}
103
104func (s *SessionStore) GetRequestByState(ctx context.Context, state string) (*OAuthRequest, error) {
105 didKey, err := s.getRequestKeyFromState(ctx, state)
106 if err != nil {
107 return nil, err
108 }
109
110 val, err := s.cache.Get(ctx, didKey).Result()
111 if err != nil {
112 return nil, err
113 }
114
115 var request OAuthRequest
116 err = json.Unmarshal([]byte(val), &request)
117 if err != nil {
118 return nil, err
119 }
120
121 return &request, nil
122}
123
124func (s *SessionStore) DeleteSession(ctx context.Context, did string) error {
125 key := fmt.Sprintf(sessionKey, did)
126 return s.cache.Del(ctx, key).Err()
127}
128
129func (s *SessionStore) DeleteRequestByState(ctx context.Context, state string) error {
130 didKey, err := s.getRequestKeyFromState(ctx, state)
131 if err != nil {
132 return err
133 }
134
135 err = s.cache.Del(ctx, fmt.Sprintf(stateKey, state)).Err()
136 if err != nil {
137 return err
138 }
139
140 return s.cache.Del(ctx, didKey).Err()
141}
142
143func (s *SessionStore) RefreshSession(ctx context.Context, did, access, refresh, expiry string) error {
144 session, err := s.GetSession(ctx, did)
145 if err != nil {
146 return err
147 }
148 session.AccessJwt = access
149 session.RefreshJwt = refresh
150 session.Expiry = expiry
151 return s.SaveSession(ctx, *session)
152}
153
154func (s *SessionStore) UpdateNonce(ctx context.Context, did, nonce string) error {
155 session, err := s.GetSession(ctx, did)
156 if err != nil {
157 return err
158 }
159 session.DpopAuthserverNonce = nonce
160 return s.SaveSession(ctx, *session)
161}
162
163func (s *SessionStore) getRequestKeyFromState(ctx context.Context, state string) (string, error) {
164 key := fmt.Sprintf(stateKey, state)
165 did, err := s.cache.Get(ctx, key).Result()
166 if err != nil {
167 return "", err
168 }
169
170 didKey := fmt.Sprintf(requestKey, did)
171 return didKey, nil
172}