diff options
Diffstat (limited to 'token.go')
| -rw-r--r-- | token.go | 19 |
1 files changed, 10 insertions, 9 deletions
@@ -11,8 +11,9 @@ import ( "time" ) -func makeSignedToken(request *http.Request) []byte { - buf := make([]byte, 0, 2*sha256.Size) +func makeSignedToken(request *http.Request) (identifier []byte, mac []byte) { + identifier = make([]byte, 0, sha256.Size) + mac = make([]byte, 0, sha256.Size) timeBuf := make([]byte, binary.MaxVarintLen64) binary.PutVarint(timeBuf, time.Now().Unix()/604800) @@ -26,17 +27,17 @@ func makeSignedToken(request *http.Request) []byte { h.Write(stringToBytes(request.Header.Get("Accept-Encoding"))) h.Write(stringToBytes(request.Header.Get("Accept-Language"))) h.Write(privkeyHash) - buf = h.Sum(buf) - if len(buf) != sha256.Size { + identifier = h.Sum(identifier) + if len(identifier) != sha256.Size { panic("unexpected buffer length after hashing contents") } - mac := hmac.New(sha256.New, privkey) - mac.Write(buf) - buf = mac.Sum(buf) - if len(buf) != 2*sha256.Size { + m := hmac.New(sha256.New, privkey) + m.Write(identifier) + mac = m.Sum(mac) + if len(mac) != sha256.Size { panic("unexpected buffer length after hmac") } - return buf + return } |