mirror of
https://github.com/imgproxy/imgproxy.git
synced 2024-11-24 08:12:38 +02:00
27 lines
476 B
Go
27 lines
476 B
Go
package main
|
|
|
|
import (
|
|
"crypto/hmac"
|
|
"crypto/sha256"
|
|
"encoding/base64"
|
|
"errors"
|
|
)
|
|
|
|
func validatePath(token, path string) error {
|
|
messageMAC, err := base64.RawURLEncoding.DecodeString(token)
|
|
if err != nil {
|
|
return errors.New("Invalid token encoding")
|
|
}
|
|
|
|
mac := hmac.New(sha256.New, conf.Key)
|
|
mac.Write(conf.Salt)
|
|
mac.Write([]byte(path))
|
|
expectedMAC := mac.Sum(nil)
|
|
|
|
if !hmac.Equal(messageMAC, expectedMAC) {
|
|
return errors.New("Invalid token")
|
|
}
|
|
|
|
return nil
|
|
}
|