1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153
|
package main
import (
"context"
"encoding/json"
"log"
"net/http"
"os"
"os/signal"
"syscall"
"time"
_ "net/http/pprof"
"github.com/centrifugal/centrifuge/_examples/jwt_token/jwt"
"github.com/centrifugal/centrifuge"
)
type clientMessage struct {
Timestamp int64 `json:"timestamp"`
Input string `json:"input"`
}
func handleLog(e centrifuge.LogEntry) {
log.Printf("%s: %v", e.Message, e.Fields)
}
func waitExitSignal(n *centrifuge.Node) {
sigCh := make(chan os.Signal, 1)
done := make(chan bool, 1)
signal.Notify(sigCh, syscall.SIGINT, syscall.SIGTERM)
go func() {
<-sigCh
_ = n.Shutdown(context.Background())
done <- true
}()
<-done
}
// Check whether channel is allowed for subscribing. In real case permission
// most probably will be more complex than in this example.
func channelSubscribeAllowed(channel string) bool {
return channel == "chat"
}
func main() {
cfg := centrifuge.DefaultConfig
cfg.LogLevel = centrifuge.LogLevelInfo
cfg.LogHandler = handleLog
node, _ := centrifuge.New(cfg)
broker, _ := centrifuge.NewMemoryBroker(node, centrifuge.MemoryBrokerConfig{
HistoryMetaTTL: 120 * time.Second,
})
node.SetBroker(broker)
tokenVerifier := jwt.NewTokenVerifier(jwt.TokenVerifierConfig{
HMACSecretKey: "secret",
})
node.OnConnecting(func(ctx context.Context, e centrifuge.ConnectEvent) (centrifuge.ConnectReply, error) {
log.Printf("client connecting with token: %s", e.Token)
token, err := tokenVerifier.VerifyConnectToken(e.Token)
if err != nil {
if err == jwt.ErrTokenExpired {
return centrifuge.ConnectReply{}, centrifuge.ErrorTokenExpired
}
return centrifuge.ConnectReply{}, centrifuge.DisconnectInvalidToken
}
subs := make(map[string]centrifuge.SubscribeOptions, len(token.Channels))
for _, ch := range token.Channels {
subs[ch] = centrifuge.SubscribeOptions{}
}
return centrifuge.ConnectReply{
Credentials: ¢rifuge.Credentials{
UserID: token.UserID,
ExpireAt: token.ExpireAt,
},
Subscriptions: subs,
}, nil
})
node.OnConnect(func(client *centrifuge.Client) {
transport := client.Transport()
log.Printf("user %s connected via %s with protocol: %s", client.UserID(), transport.Name(), transport.Protocol())
client.OnRefresh(func(e centrifuge.RefreshEvent, cb centrifuge.RefreshCallback) {
log.Printf("user %s connection is going to expire, refreshing", client.UserID())
cb(centrifuge.RefreshReply{ExpireAt: time.Now().Unix() + 60}, nil)
})
client.OnSubscribe(func(e centrifuge.SubscribeEvent, cb centrifuge.SubscribeCallback) {
log.Printf("user %s subscribes on %s", client.UserID(), e.Channel)
if !channelSubscribeAllowed(e.Channel) {
cb(centrifuge.SubscribeReply{}, centrifuge.ErrorPermissionDenied)
return
}
cb(centrifuge.SubscribeReply{}, nil)
})
client.OnPublish(func(e centrifuge.PublishEvent, cb centrifuge.PublishCallback) {
log.Printf("user %s publishes into channel %s: %s", client.UserID(), e.Channel, string(e.Data))
if !client.IsSubscribed(e.Channel) {
cb(centrifuge.PublishReply{}, centrifuge.ErrorPermissionDenied)
return
}
var msg clientMessage
err := json.Unmarshal(e.Data, &msg)
if err != nil {
cb(centrifuge.PublishReply{}, centrifuge.ErrorBadRequest)
return
}
cb(centrifuge.PublishReply{}, nil)
})
client.OnDisconnect(func(e centrifuge.DisconnectEvent) {
log.Printf("user %s disconnected, disconnect: %s", client.UserID(), e.Disconnect)
})
})
if err := node.Run(); err != nil {
log.Fatal(err)
}
websocketHandler := centrifuge.NewWebsocketHandler(node, centrifuge.WebsocketConfig{
ReadBufferSize: 1024,
UseWriteBufferPool: true,
})
http.Handle("/connection/websocket", websocketHandler)
http.Handle("/token", http.HandlerFunc(func(w http.ResponseWriter, request *http.Request) {
w.Header().Set("Content-Type", "application/json")
token, err := jwt.BuildUserToken("secret", "42", time.Now().Unix()+10)
if err != nil {
w.WriteHeader(http.StatusInternalServerError)
return
}
_, _ = w.Write([]byte(`{"token": "` + token + `"}`))
}))
http.Handle("/", http.FileServer(http.Dir("./")))
go func() {
if err := http.ListenAndServe(":8000", nil); err != nil {
log.Fatal(err)
}
}()
waitExitSignal(node)
log.Println("bye!")
}
|