jwt for webapp

pkg/server/xsrf.go

@@ -0,0 +1,43 @@
+package server
+
+import (
+	"crypto/rand"
+	"crypto/subtle"
+	"encoding/base64"
+	"git.giftfish.de/ston1th/gowiki/pkg/log"
+	"git.giftfish.de/ston1th/jwt"
+)
+
+const keySize = jwt.KeySize / 2
+
+func genKey(length int) (bytes []byte) {
+	bytes = make([]byte, length)
+	if _, err := io.ReadFull(rand.Reader, bytes); err != nil {
+		log.Println("genKey:", err)
+	}
+	return
+}
+
+func newXsrf(secret []byte) string {
+	rnd := genKey(keySize)
+	return base64.StdEncoding.EncodeToString(append(rnd, xor(rnd, secret)...))
+}
+
+func checkXsrf(xsrf string, secret []byte) bool {
+	t, err := base64.StdEncoding.DecodeString(xsrf)
+	if err != nil {
+		return false
+	}
+	return subtle.ConstantTimeCompare(secret, xor(t[keySize:], t[:keySize])) == 1
+}
+
+func xor(a, b []byte) []byte {
+	n := len(a)
+	if len(b) != n {
+		return nil
+	}
+	for i := 0; i < n; i++ {
+		a[i] = a[i] ^ b[i]
+	}
+	return a
+}