Jeff Mitchell
74544f6324
* Encrypt tokens on the way out and decrypt on the way in This isn't a security feature related to tokens specifically; it's so that we can discard cryptographically bad tokens before we ever hit the DB. This way we can't pass through a DDoS to the database due to fetching obviously invalid token values. I'm using base58 to encode the resulting value as there aren't great base62 options, and allowing base64 / and + values can hamper usability by creating copying/highlighting breaks.
42 lines
963 B
Go
42 lines
963 B
Go
package base
|
|
|
|
// getOpts - iterate the inbound Options and return a struct.
|
|
func getOpts(opt ...Option) Options {
|
|
opts := getDefaultOptions()
|
|
for _, o := range opt {
|
|
o(&opts)
|
|
}
|
|
return opts
|
|
}
|
|
|
|
// Option - how Options are passed as arguments.
|
|
type Option func(*Options)
|
|
|
|
// Options - how Options are represented.
|
|
type Options struct {
|
|
withNoTokenScope bool
|
|
withNoTokenValue bool
|
|
}
|
|
|
|
func getDefaultOptions() Options {
|
|
return Options{}
|
|
}
|
|
|
|
// WithNoTokenScope tells the client not to set a scope for the client from a
|
|
// saved token's scope, as this can cause confusing behavior at authentication
|
|
// time.
|
|
func WithNoTokenScope() Option {
|
|
return func(o *Options) {
|
|
o.withNoTokenScope = true
|
|
}
|
|
}
|
|
|
|
// WithNoTokenValue tells the client not to set a token for the client from a
|
|
// saved token's value, as this can cause confusing behavior at authentication
|
|
// time.
|
|
func WithNoTokenValue() Option {
|
|
return func(o *Options) {
|
|
o.withNoTokenValue = true
|
|
}
|
|
}
|