Packages
openmaize
0.16.2
3.0.1
retired
3.0.0
2.9.0
2.8.0
2.7.0
2.6.0
2.5.1
2.5.0
2.4.0
2.3.2
2.3.1
2.3.0
2.2.0
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.2
2.0.1
2.0.0
1.0.1
1.0.0
1.0.0-beta.5
1.0.0-beta.4
1.0.0-beta.3
1.0.0-beta.2
1.0.0-beta.1
1.0.0-beta.0
0.19.3
0.19.2
0.19.1
0.19.0
0.18.1
0.18.0
0.17.2
0.17.1
0.17.0
0.16.2
0.16.1
0.16.0
0.15.1
0.15.0
0.14.0
0.13.0
0.12.0
0.11.1
0.11.0
0.10.2
0.10.1
0.10.0
0.8.1
0.8.0
0.7.5
0.7.4
0.7.2
0.7.1
0.7.0
0.6.7
0.6.6
0.6.3
0.6.2
0.6.1
0.6.0
0.5.0
0.4.1
0.4.0
Authentication library for Elixir using Plug
Current section
Files
Jump to
Current section
Files
lib/openmaize/plugs/authenticate.ex
defmodule Openmaize.Authenticate do
@moduledoc """
Plug to authenticate users, using Json Web Tokens.
For more information about Json Web Tokens, see the documentation for
the Openmaize.Token module.
It is important to note that this module only checks the identity of
the user. For authorization / access control, you need to perform
further checks - see the Openmaize.AccessControl module for more
information.
## Examples using Phoenix
Add the following line to the pipeline in the `web/router.ex` file:
plug Openmaize.Authenticate
"""
import Plug.Conn
import Openmaize.Token.Verify
@behaviour Plug
def init(opts), do: opts
@doc """
Authenticate the user using JSON Web Tokens.
This function checks the token, which is either in a cookie or the
request headers, and authenticates the user based on the information in
the token.
It also sets the current_user variable, which, if you are using
Phoenix, can then be used in your templates. If no token is found, the
current_user is set to nil.
"""
def call(%Plug.Conn{req_cookies: %{"access_token" => token}} = conn, _opts) do
check_token(token) |> set_current_user(conn)
end
def call(%Plug.Conn{req_headers: headers} = conn, _opts) do
case List.keyfind(headers, "authorization", 0) do
{_, token} -> check_token(token) |> set_current_user(conn)
nil -> set_current_user(nil, conn)
end
end
defp check_token("Bearer " <> token), do: check_token(token)
defp check_token(token) when is_binary(token), do: verify_token(token)
defp check_token(_), do: nil
defp set_current_user({:ok, data}, conn), do: assign(conn, :current_user, data)
defp set_current_user({:error, _}, conn), do: assign(conn, :current_user, nil)
defp set_current_user(nil, conn), do: assign(conn, :current_user, nil)
end