labstack/echo-jwt

go get github.com/labstack/echo-jwt/v5

import "github.com/labstack/echo-jwt/v5"

e.Use(echojwt.JWT([]byte("secret")))

e.Use(echojwt.WithConfig(echojwt.Config{
  // ...
  SigningKey:             []byte("secret"),
  // ...
}))

import "github.com/golang-jwt/jwt/v5"

// ...

e.GET("/", func(c *echo.Context) error {
  token, err := echo.ContextGet[*jwt.Token](c,"user")
  if err != nil {
    return echo.ErrUnauthorized.Wrap(err)
  }
  claims, ok := token.Claims.(jwt.MapClaims) // by default claims is of type `jwt.MapClaims`
  if !ok {
    return errors.New("failed to cast claims as jwt.MapClaims")
  }
  return c.JSON(http.StatusOK, claims)
})

func TestIntegrationMiddlewareWithHandler(t *testing.T) {
	e := echo.New()
	e.Use(echojwt.WithConfig(echojwt.Config{
		SigningKey: []byte("secret"),
	}))

  // use handler that gets token from context to fail your CI flow when `golang-jwt/jwt` library version changes 
  // a) `token, ok := c.Get("user").(*jwt.Token)`
  // b) `token := c.Get("user").(*jwt.Token)`
	e.GET("/example", exampleHandler) 

	req := httptest.NewRequest(http.MethodGet, "/example", nil)
	req.Header.Set(echo.HeaderAuthorization, "Bearer <TOKEN>")
	res := httptest.NewRecorder()

	e.ServeHTTP(res, req)
	
	if res.Code != 200 {
		t.Failed()
	}
}

package main

import (
  "errors"
  "log/slog"

  "github.com/golang-jwt/jwt/v5"
  "github.com/labstack/echo-jwt/v5"
  "github.com/labstack/echo/v5"
  "github.com/labstack/echo/v5/middleware"

  "net/http"
)

func main() {
  e := echo.New()
  e.Use(middleware.RequestLogger())
  e.Use(middleware.Recover())

  e.Use(echojwt.WithConfig(echojwt.Config{
    SigningKey: []byte("secret"),
  }))

  e.GET("/", func(c *echo.Context) error {
    token, err := echo.ContextGet[*jwt.Token](c, "user")
    if err != nil {
      return echo.ErrUnauthorized.Wrap(err)
    }
    claims, ok := token.Claims.(jwt.MapClaims) // by default claims is of type `jwt.MapClaims`
    if !ok {
      return errors.New("failed to cast claims as jwt.MapClaims")
    }
    return c.JSON(http.StatusOK, claims)
  })

  if err := e.Start(":8080"); err != nil {
    slog.Error("Failed to start server", "error", err)
  }
}

curl -v -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ" http://localhost:8080

* Trying 127.0.0.1:8080...
* Connected to localhost (127.0.0.1) port 8080 (#0)
> GET / HTTP/1.1
> Host: localhost:8080
> User-Agent: curl/7.81.0
> Accept: */*
> Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWV9.TJVA95OrM7E2cBab30RMHrHDcEfxjoYZgeFONFh7HgQ
> 
* Mark bundle as not supporting multiuse
< HTTP/1.1 200 OK
< Content-Type: application/json; charset=UTF-8
< Date: Sun, 27 Nov 2022 21:34:17 GMT
< Content-Length: 52
< 
{"admin":true,"name":"John Doe","sub":"1234567890"}