pomerium/internal/sessions/middleware.go

package sessions // import "github.com/pomerium/pomerium/internal/sessions"

import (
	"context"
	"errors"
	"net/http"

	"github.com/pomerium/pomerium/internal/urlutil"
)

// Context keys
var (
	SessionCtxKey    = &contextKey{"Session"}
	SessionJWTCtxKey = &contextKey{"SessionJWT"}
	ErrorCtxKey      = &contextKey{"Error"}
)

// RetrieveSession takes a slice of session loaders and tries to find a valid
// session in the order they were supplied and is added to the request's context
func RetrieveSession(s ...SessionLoader) func(http.Handler) http.Handler {
	return func(next http.Handler) http.Handler {
		return retrieve(s...)(next)
	}
}

func retrieve(s ...SessionLoader) func(http.Handler) http.Handler {
	return func(next http.Handler) http.Handler {
		hfn := func(w http.ResponseWriter, r *http.Request) {
			ctx := r.Context()
			state, jwt, err := retrieveFromRequest(r, s...)
			ctx = NewContext(ctx, state, jwt, err)
			next.ServeHTTP(w, r.WithContext(ctx))
		}
		return http.HandlerFunc(hfn)
	}
}

// retrieveFromRequest extracts sessions state from the request by calling
// token find functions in the order they where provided.
func retrieveFromRequest(r *http.Request, sessions ...SessionLoader) (*State, string, error) {
	for _, s := range sessions {
		state, jwt, err := s.LoadSession(r)
		if err != nil && !errors.Is(err, ErrNoSessionFound) {
			return state, jwt, err
		}
		if state != nil {
			//todo(bdd): have authz verify
			err := state.Verify(urlutil.StripPort(r.Host))
			return state, jwt, err // N.B.: state is _not_ nil
		}
	}

	return nil, "", ErrNoSessionFound
}

// NewContext sets context values for the user session state and error.
func NewContext(ctx context.Context, t *State, jwt string, err error) context.Context {
	ctx = context.WithValue(ctx, SessionCtxKey, t)
	ctx = context.WithValue(ctx, SessionJWTCtxKey, jwt)
	ctx = context.WithValue(ctx, ErrorCtxKey, err)
	return ctx
}

// FromContext retrieves context values for the user session state and error.
func FromContext(ctx context.Context) (*State, string, error) {
	state, _ := ctx.Value(SessionCtxKey).(*State)
	jwt, _ := ctx.Value(SessionJWTCtxKey).(string)
	err, _ := ctx.Value(ErrorCtxKey).(error)
	return state, jwt, err
}

// contextKey is a value for use with context.WithValue. It's used as
// a pointer so it fits in an interface{} without allocation. This technique
// for defining context keys was copied from Go 1.7's new use of context in net/http.
type contextKey struct {
	name string
}

func (k *contextKey) String() string {
	return "context value " + k.name
}