ultimate confusion

Author: 1lann

callback.go

@@ -111,7 +111,7 @@ func (t *Tmpauth) authCallback(w http.ResponseWriter, r *http.Request) (int, err
 
 	// token validated, can cache now
 	tokenID := sha256.Sum256([]byte(wToken))
-	token.RawToken = wToken
+	token.WrappedToken = wToken
 	t.tokenCacheMutex.Lock()
 	t.TokenCache[tokenID] = token
 	t.tokenCacheMutex.Unlock()

handler.go

@@ -433,12 +433,12 @@ func (t *Tmpauth) Whomst(token *CachedToken) (map[string]json.RawMessage, error)
 			return nil, fmt.Errorf("invalid mini server request: %w", err)
 		}
 
-		req.Header.Set(TokenHeader, token.RawToken)
+		req.Header.Set(TokenHeader, token.InnerToken)
 
 		resp, respErr = t.miniClient(req, 0)
 	} else {
 		resp, respErr = t.HttpClient.Get("https://" + TmpAuthHost + "/whomst/tmpauth/db?token=" +
-			url.QueryEscape(token.RawToken))
+			url.QueryEscape(token.InnerToken))
 	}
 	if respErr != nil {
 		return nil, respErr

token.go

@@ -29,7 +29,8 @@ type CachedToken struct {
 	ValidatedAt    time.Time
 	IssuedAt       time.Time
 	UserIDs        []string // IDs that can be used in Config.AllowedUsers from IDFormats
-	RawToken       string
+	WrappedToken   string
+	InnerToken     string
 	headersMutex   *sync.RWMutex
 }
 
@@ -258,7 +259,8 @@ func (t *Tmpauth) ParseAuthJWT(tokenStr string, wrappedToken string, minValidati
 		IssuedAt:       iat,
 		StateID:        stateID,
 		ValidatedAt:    minValidationTime,
-		RawToken:       wrappedToken,
+		WrappedToken:   wrappedToken,
+		InnerToken:     tokenStr,
 		headersMutex:   new(sync.RWMutex),
 	}
 
@@ -302,7 +304,7 @@ func (t *Tmpauth) SetHeaders(token *CachedToken, headers http.Header) error {
 					}
 
 					req.Header.Set(ConfigIDHeader, t.miniConfigID)
-					req.Header.Set(TokenHeader, token.RawToken)
+					req.Header.Set(TokenHeader, token.WrappedToken)
 
 					req.Header.Set("Content-Type", "application/jwt")
 					resp, err := t.miniClient(req, 0)