/go-restapi-jwt

Primary LanguageGo

Go RESTAPI JWT

Before, especially thanks for @seefnasrul for the tutorial on Medium

Pre-requisite

  • Using Air for Live Reload Go

How to usage

  • Protected Endpoint
  GET http://localhost:8080/api/v1/admin/user
  Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdXRob3JpemVkIjp0cnVlLCJleHAiOjE2Njc3NDE4OTgsInVzZXJfaWQiOjI0fQ.-U_un1uzTt

  #response
  {
  "data": {
    "ID": 24,
    "CreatedAt": "2022-11-06T18:50:51.992+07:00",
    "UpdatedAt": "2022-11-06T18:50:51.992+07:00",
    "DeletedAt": null,
    "username": "admin",
    "password": ""
  },
  "message": "success"
}
  • Register User
  POST http://localhost:8080/api/v1/register
  {
    "username": "brody",
    "password": "123456"
  }
  
  #response  
  {
    "message": "registration success !"
  }
  • Login User
  POST http://localhost:8080/api/v1/login
  {
    "username": "brody",
    "password": "123456"
  }

  #response  
  {
    "message" : "success"
    "token" : "kjbskjh12938124kj123..."
  }
  • Available Using CORS
  func CORSMiddleware() gin.HandlerFunc {
	return func(c *gin.Context) {

		// Change "*" to URL Destination, ex: "www.google.com"
		c.Header("Access-Control-Allow-Origin", "*")
		c.Header("Access-Control-Allow-Credentials", "true")
		c.Header("Access-Control-Allow-Headers", "Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With")
		c.Header("Access-Control-Allow-Methods", "POST,HEAD,PATCH, OPTIONS, GET, PUT")

		if c.Request.Method == "OPTIONS" {
			c.AbortWithStatus(204)
			return
		}

		fmt.Print("Success Passed the CORS !")
		c.Next()
	}
  }