mock auth, author by role token, next: filtering doctor request

internal/api/routes.go

@@ -1,7 +1,9 @@
 package api
 
 import (
+	"encoding/json"
 	"net/http"
+	"strings"
 	"time"
 
 	"devone.aplikasi.web.id/gitea/mario/go-ohif-proxy/config"
@@ -113,5 +115,54 @@ func SetupRouter(cfg *config.Config, logger *zap.Logger) http.Handler {
 		})
 	})
 
+	// Add this to your routes setup - in the public routes group
+	r.Get("/debug/token", func(w http.ResponseWriter, r *http.Request) {
+		authHeader := r.Header.Get("Authorization")
+		if authHeader == "" {
+			w.WriteHeader(http.StatusUnauthorized)
+			json.NewEncoder(w).Encode(map[string]string{
+				"error": "No Authorization header provided",
+			})
+			return
+		}
+
+		bearerToken := strings.Split(authHeader, " ")
+		if len(bearerToken) != 2 || strings.ToLower(bearerToken[0]) != "bearer" {
+			w.WriteHeader(http.StatusBadRequest)
+			json.NewEncoder(w).Encode(map[string]string{
+				"error": "Invalid Authorization format",
+			})
+			return
+		}
+
+		token := bearerToken[1]
+		claims, err := authService.ValidateToken(token)
+		if err != nil {
+			w.WriteHeader(http.StatusUnauthorized)
+			json.NewEncoder(w).Encode(map[string]string{
+				"error": err.Error(),
+			})
+			return
+		}
+
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusOK)
+		json.NewEncoder(w).Encode(map[string]interface{}{
+			"status":     "valid",
+			"token_type": claims.TokenType,
+			"user": map[string]string{
+				"id":    claims.UserID,
+				"email": claims.Email,
+				"role":  claims.Role,
+				"name":  claims.UserName,
+			},
+			"patient_info": map[string]string{
+				"patient_id":       claims.PatientID,
+				"study_iuid":       claims.StudyIUID,
+				"accession_number": claims.AccessionNumber,
+			},
+		})
+	})
+
 	return r
 }