h/golib
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed fatal bug after access token expires

Browse Source
This commit is contained in:
Haelnorr
2026-02-07 17:58:02 +11:00
parent 8f7c87cef2
commit 05be28d7f3
2 changed files with 34 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hwsauth/logout.go
View File

@@ -33,14 +33,18 @@ func (auth *Authenticator[T, TX]) Logout(tx TX, w http.ResponseWriter, r *http.R
if err != nil { if err != nil {
return errors.Wrap(err, "auth.getTokens") return errors.Wrap(err, "auth.getTokens")
} }
if aT != nil {
err = aT.Revoke(jwt.DBTransaction(tx)) err = aT.Revoke(jwt.DBTransaction(tx))
if err != nil { if err != nil {
return errors.Wrap(err, "aT.Revoke") return errors.Wrap(err, "aT.Revoke")
} }
}
if rT != nil {
err = rT.Revoke(jwt.DBTransaction(tx)) err = rT.Revoke(jwt.DBTransaction(tx))
if err != nil { if err != nil {
return errors.Wrap(err, "rT.Revoke") return errors.Wrap(err, "rT.Revoke")
} }
}
cookies.DeleteCookie(w, "access", "/") cookies.DeleteCookie(w, "access", "/")
cookies.DeleteCookie(w, "refresh", "/") cookies.DeleteCookie(w, "refresh", "/")
return nil return nil

19
hwsauth/reauthenticate.go
View File

@@ -34,7 +34,7 @@ func (auth *Authenticator[T, TX]) RefreshAuthTokens(tx TX, w http.ResponseWriter
rememberMe := map[string]bool{ rememberMe := map[string]bool{
"session": false, "session": false,
"exp": true, "exp": true,
}[aT.TTL] }[rT.TTL]
// issue new tokens for the user // issue new tokens for the user
err = jwt.SetTokenCookies(w, r, auth.tokenGenerator, rT.SUB, true, rememberMe, auth.SSL) err = jwt.SetTokenCookies(w, r, auth.tokenGenerator, rT.SUB, true, rememberMe, auth.SSL)
if err != nil { if err != nil {
@@ -55,14 +55,21 @@ func (auth *Authenticator[T, TX]) getTokens(
) (*jwt.AccessToken, *jwt.RefreshToken, error) { ) (*jwt.AccessToken, *jwt.RefreshToken, error) {
// get the existing tokens from the cookies // get the existing tokens from the cookies
atStr, rtStr := jwt.GetTokenCookies(r) atStr, rtStr := jwt.GetTokenCookies(r)
aT, err := auth.tokenGenerator.ValidateAccess(jwt.DBTransaction(tx), atStr) var aT *jwt.AccessToken
var rT *jwt.RefreshToken
var err error
if atStr != "" {
aT, err = auth.tokenGenerator.ValidateAccess(jwt.DBTransaction(tx), atStr)
if err != nil { if err != nil {
return nil, nil, errors.Wrap(err, "tokenGenerator.ValidateAccess") return nil, nil, errors.Wrap(err, "tokenGenerator.ValidateAccess")
} }
rT, err := auth.tokenGenerator.ValidateRefresh(jwt.DBTransaction(tx), rtStr) }
if rtStr != "" {
rT, err = auth.tokenGenerator.ValidateRefresh(jwt.DBTransaction(tx), rtStr)
if err != nil { if err != nil {
return nil, nil, errors.Wrap(err, "tokenGenerator.ValidateRefresh") return nil, nil, errors.Wrap(err, "tokenGenerator.ValidateRefresh")
} }
}
return aT, rT, nil return aT, rT, nil
} }
@@ -72,13 +79,17 @@ func revokeTokenPair(
aT *jwt.AccessToken, aT *jwt.AccessToken,
rT *jwt.RefreshToken, rT *jwt.RefreshToken,
) error { ) error {
if aT != nil {
err := aT.Revoke(tx) err := aT.Revoke(tx)
if err != nil { if err != nil {
return errors.Wrap(err, "aT.Revoke") return errors.Wrap(err, "aT.Revoke")
} }
err = rT.Revoke(tx) }
if rT != nil {
err := rT.Revoke(tx)
if err != nil { if err != nil {
return errors.Wrap(err, "rT.Revoke") return errors.Wrap(err, "rT.Revoke")
} }
}
return nil return nil
} }