Add full refresh token and access token function

Signed-off-by: Asai Neko <sugar@sne.moe>
This commit is contained in:
2025-12-25 16:13:05 +08:00
parent 32a27d974a
commit 3a86d387bd
13 changed files with 274 additions and 195 deletions

View File

@@ -3,7 +3,7 @@ package auth
import (
"net/http"
"nixcn-cms/data"
"nixcn-cms/internal/crypto/jwt"
"nixcn-cms/internal/cryptography"
"nixcn-cms/pkgs/email"
"nixcn-cms/pkgs/magiclink"
"nixcn-cms/pkgs/turnstile"
@@ -61,14 +61,14 @@ func RequestMagicLink(c *gin.Context) {
func VerifyMagicLink(c *gin.Context) {
// Get token from url
token := c.Query("token")
if token == "" {
magicToken := c.Query("token")
if magicToken == "" {
c.JSON(400, gin.H{"error": "missing token"})
return
}
// Verify email token
email, ok := magiclink.VerifyMagicToken(token)
email, ok := magiclink.VerifyMagicToken(magicToken)
if !ok {
c.JSON(401, gin.H{"error": "invalid or expired token"})
return
@@ -80,10 +80,19 @@ func VerifyMagicLink(c *gin.Context) {
if err != nil {
c.JSON(http.StatusUnauthorized, gin.H{"status": "user not found"})
}
jwtToken, _ := jwt.GenerateToken(userInfo.UserId, "application")
JwtTool := cryptography.Token{
UserID: userInfo.UserId,
Application: viper.GetString("server.application"),
}
accessToken, refreshToken, err := JwtTool.IssueTokens()
if err != nil {
c.JSON(500, gin.H{
"status": "error generating tokens",
})
}
c.JSON(200, gin.H{
"jwt_token": jwtToken,
"email": email,
"access_token": accessToken,
"refresh_token": refreshToken,
})
}