connectrpc-middleware

auth interceptor

used with caution, still in development

//default bearer token extractor and parser
//extract token from "Authorization": Bearer <token>, and parse token into jwt.MapClaim
authMiddleware, err := middleware.NewAuthMiddleware(middleware.WithDefaultBearerExtractorAndParser([]byte("secret")))
if err != nil {
	panic(err)
}
http.ListenAndServe(
	"localhost:8080",
	// Use h2c so we can serve HTTP/2 without TLS.
	h2c.NewHandler(authMiddleware.Wrap(mux), &http2.Server{}),
)

TODO

• tests for cookie
• e2e test
• test for kid field

refs

• echo-jwt
• connectrpc
• connectauth