Merge pull request #3 from StandUpCode/develop

Feat: Verify ID Token

Author: pattanun-np

VERSION_HISTORY.md

@@ -0,0 +1,8 @@
+# Version History
+
+## `Version 0.0.1-alpha.`
+Pre-release.
+    - Use net/http of api client.
+    
+Feature:
+    - Verify AccesToken Token

model.go

@@ -1,8 +1,18 @@
 package lineloginadminsdk
 
-
-type AccessTokeVerify struct {
-	ClientID string `json:"client_id"`
-	ExpiresIn int `json:"expires_in"`
-	Scope string `json:"scope"`
-}
+type AccessTokenVerify struct {
+	ClientID  string `json:"client_id"`
+	ExpiresIn int    `json:"expires_in"`
+	Scope     string `json:"scope"`
+}
+type IDTokenVerify struct {
+	ISS     string   `json:"iss"`
+	Aud     string   `json:"aud"`
+	Exp     int      `json:"exp"`
+	Iat     int      `json:"iat"`
+	Sub     string   `json:"sub"`
+	Name    string   `json:"name"`
+	Picture string   `json:"picture"`
+	Amr     []string `json:"amr"`
+	email string `json:"email"`
+}

token.go

@@ -1,6 +1,7 @@
 package lineloginadminsdk
 
 import (
+	"encoding/json"
 	"fmt"
 
 	"github.com/StandUpCode/LineLoginAdminSDK/utils"
@@ -15,11 +16,28 @@ func VerifyAccessToken(accessToken string) error {
 	if err != nil {
 		panic(err)
 	}
-
 	return nil
 
 }
 
-func VerifyIDToken(idToken string) error {
+func VerifyIDToken(IDToken , ChannelID string) (*IDTokenVerify, error){
+
+	uri := "https://api.line.me/oauth2/v2.1/verify"
+	payload := fmt.Sprintf("id_token=%s&client_id=%s", IDToken, ChannelID)
+	
+	content_type := "application/x-www-form-urlencoded"
+	result, err := utils.Post(uri, payload, content_type)
 
-}
+	if err != nil {
+		panic(err)
+	}
+	verify_response := IDTokenVerify{}
+	err = json.Unmarshal(result, &verify_response)
+	if err != nil {
+		//fmt.Printf("Error: %s", err)
+		return nil, err
+	}
+	
+	return &verify_response, nil
+}
+

token_test.go

@@ -10,6 +10,16 @@ var AccessTokenTestData = []struct {
 	{"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczovL2FjY2Vzcy5saW5lLm1lIiwic3ViIjoiVWM3YTc0MTUyYjI5MDAzMDkwNGJiNWM1ZGExM2NiNDRmIiwiYXVkIjoiMTY1NjcxMTg0NCIsImV4cCI6MTY0OTA1NTY3OSwiaWF0IjoxNjQ5MDUyMDc5LCJhbXIiOlsibGluZXNzbyJdLCJuYW1lIjoiQVJNIiwicGljdHVyZSI6Imh0dHBzOi8vcHJvZmlsZS5saW5lLXNjZG4ubmV0LzBoQldfb0tuODBIWGhpRmdsWmhCVmlMMTVURXhVVk9Cc3dHblFDR2tFVlJFMUpJQWtwV25SYVMwQVJFeDhjY1EwbURTTlJIQlVlUzBrZiJ9.KJpi1tu4nbOagjiDJhau5rnm4c_I55eB1PcNh9FALvY"},
 }
 
+var IDTestData = []struct {
+	IDToken   string
+	ChannelID string
+}{
+	{
+		"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczovL2FjY2Vzcy5saW5lLm1lIiwic3ViIjoiVWM3YTc0MTUyYjI5MDAzMDkwNGJiNWM1ZGExM2NiNDRmIiwiYXVkIjoiMTY1NjcxMTg0NCIsImV4cCI6MTY0OTA2MjIyNiwiaWF0IjoxNjQ5MDU4NjI2LCJhbXIiOlsibGluZXNzbyJdLCJuYW1lIjoiQVJNIiwicGljdHVyZSI6Imh0dHBzOi8vcHJvZmlsZS5saW5lLXNjZG4ubmV0LzBoQldfb0tuODBIWGhpRmdsWmhCVmlMMTVURXhVVk9Cc3dHblFDR2tFVlJFMUpJQWtwV25SYVMwQVJFeDhjY1EwbURTTlJIQlVlUzBrZiJ9.a36c5JW0fzDx5RgYECsxLKtBoqgc7q93nZ_RrHmzeqo",
+		"1656711844",
+	},
+}
+
 func TestVerifyAccessToken(t *testing.T) {
 	for _, data := range AccessTokenTestData {
 		var err error
@@ -21,3 +31,15 @@ func TestVerifyAccessToken(t *testing.T) {
 	}
 
 }
+
+func TestVerifyIDToken(t *testing.T) {
+	for _, data := range IDTestData {
+		var err error
+
+		if _,err = VerifyIDToken(data.IDToken, data.ChannelID); err != nil {
+			t.Errorf("Unable to verify accesstoken: %v", err)
+		}
+
+	}
+
+}

utils/requests.go

@@ -2,112 +2,58 @@ package utils
 
 import (
 	"fmt"
-	"io/ioutil"
-	// "log"
-	"net/http"
 
-	
+	"github.com/valyala/fasthttp"
 )
 
-var statusMessage = []string{
-	100: "Continue",
-	101: "Switching Protocols",
-	102: "Processing",
-	103: "Early Hints",
-	200: "OK",
-	201: "Created",
-	202: "Accepted",
-	203: "Non-Authoritative Information",
-	204: "No Content",
-	205: "Reset Content",
-	206: "Partial Content",
-	207: "Multi-Status",
-	208: "Already Reported",
-	226: "IM Used",
-	300: "Multiple Choices",
-	301: "Moved Permanently",
-	302: "Found",
-	303: "See Other",
-	304: "Not Modified",
-	305: "Use Proxy",
-	306: "Switch Proxy",
-	307: "Temporary Redirect",
-	308: "Permanent Redirect",
-	400: "Bad Request",
-	401: "Unauthorized",
-	402: "Payment Required",
-	403: "Forbidden",
-	404: "Not Found",
-	405: "Method Not Allowed",
-	406: "Not Acceptable",
-	407: "Proxy Authentication Required",
-	408: "Request Timeout",
-	409: "Conflict",
-	410: "Gone",
-	411: "Length Required",
-	412: "Precondition Failed",
-	413: "Request Entity Too Large",
-	414: "Request URI Too Long",
-	415: "Unsupported Media Type",
-	416: "Requested Range Not Satisfiable",
-	417: "Expectation Failed",
-	418: "I'm a teapot",
-	421: "Misdirected Request",
-	422: "Unprocessable Entity",
-	423: "Locked",
-	424: "Failed Dependency",
-	426: "Upgrade Required",
-	428: "Precondition Required",
-	429: "Too Many Requests",
-	431: "Request Header Fields Too Large",
-	451: "Unavailable For Legal Reasons",
-	500: "Internal Server Error",
-	501: "Not Implemented",
-	502: "Bad Gateway",
-	503: "Service Unavailable",
-	504: "Gateway Timeout",
-	505: "HTTP Version Not Supported",
-	506: "Variant Also Negotiates",
-	507: "Insufficient Storage",
-	508: "Loop Detected",
-	510: "Not Extended",
-	511: "Network Authentication Required",
-}
-
 func Get(uri string) error {
-	client := http.Client{}
-	req, err := http.NewRequest("GET", uri, nil)
+	req := fasthttp.AcquireRequest()
+	defer fasthttp.ReleaseRequest(req)
+	req.SetRequestURI(uri)
+
+	// Acquire a response instance
+	resp := fasthttp.AcquireResponse()
+	defer fasthttp.ReleaseResponse(resp)
 
-	resp, err := client.Do(req)
-	
-	body, err := ioutil.ReadAll(resp.Body)
+	err := fasthttp.Do(req, resp)
 	if err != nil {
-		panic(err)
+		fmt.Printf("Client get failed: %s\n", err)
+		return err
 	}
-	fmt.Println(string(body))
+	if resp.StatusCode() != fasthttp.StatusOK {
+		fmt.Printf("Expected status code %d but got %d\n", fasthttp.StatusOK, resp.StatusCode())
+		return err
+	}
+	body := resp.Body()
+
+	fmt.Printf("Response body is: %s", body)
 
 	return nil
+
 }
 
-// func Post(uri string, payload string, content_type string) []byte {
-// 	req := fasthttp.AcquireRequest()
-// 	defer fasthttp.ReleaseRequest(req)
+func Post(uri string, payload string, content_type string) ([]byte, error) {
+	req := fasthttp.AcquireRequest()
+	defer fasthttp.ReleaseRequest(req)
 
-// 	resp := fasthttp.AcquireResponse()
-// 	defer fasthttp.ReleaseResponse(resp)
+	resp := fasthttp.AcquireResponse()
+	defer fasthttp.ReleaseResponse(resp)
 
-// 	req.Header.SetMethod("POST")
-// 	req.Header.SetContentType(content_type)
+	req.Header.SetMethod("POST")
+	req.Header.SetContentType(content_type)
 
-// 	req.SetRequestURI(uri)
-// 	req.SetBody([]byte(payload))
+	req.SetRequestURI(uri)
 
-// 	if err := fasthttp.Do(req, resp); err != nil {
-// 		log.Println("Error: ", err)
-// 	}
-// 	result := resp.Body()
-// 	// fmt.Println(result)
+	req.SetBody([]byte(payload))
 
-// 	return result
+	err := fasthttp.Do(req, resp)
+	if err != nil {
+		fmt.Printf("Client get failed: %s\n", err)
+		return nil, err
+	}
+	body := resp.Body()
+	fmt.Printf("Response body is: %s", body)
 
-//}
+	return body, nil
+
+}