step 3 : login absensi fix, return graphql staff

backend/pkg/auth/middleware.go

@@ -0,0 +1,70 @@
+package auth
+
+import (
+	"context"
+	"log"
+	"net/http"
+	"strings"
+
+	"com.sismedika.com.absensi/graph/model"
+	"com.sismedika.com.absensi/pkg/jwt"
+)
+
+var userCtxKey = &contextKey{"user"}
+
+type contextKey struct {
+	name string
+}
+
+type AuthRequest struct {
+	isAuthenticated bool
+	staff           model.Staff
+}
+
+func Middleware() func(http.Handler) http.Handler {
+	return func(next http.Handler) http.Handler {
+		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			header := r.Header.Get("Authorization")
+			AuthStatus := AuthRequest{isAuthenticated: false}
+			// Allow unauthenticated users in
+			if header == "" {
+				ctx := context.WithValue(r.Context(), userCtxKey, &AuthStatus)
+				r = r.WithContext(ctx)
+				next.ServeHTTP(w, r)
+				return
+			}
+
+			// validate jwt token
+			tokenParts := strings.Split(header, " ")
+			var tokenStr string
+			if len(tokenParts) == 2 && tokenParts[0] == "Bearer" {
+				tokenStr = tokenParts[1]
+			}
+			email, idGoogleSignIn, err := jwt.ParseToken(tokenStr)
+			if err != nil {
+				log.Printf("ParseToken: %v\n", err)
+				ctx := context.WithValue(r.Context(), userCtxKey, &AuthStatus)
+				r = r.WithContext(ctx)
+				next.ServeHTTP(w, r)
+				// boom.Unathorized(w, fmt.Errorf("AUTHORIZATION_HEADER_INVALID"))
+				return
+			}
+			AuthStatus.staff = model.Staff{
+				Email:          email,
+				IDGoogleSignIn: idGoogleSignIn,
+			}
+			// put it in context
+			ctx := context.WithValue(r.Context(), userCtxKey, &AuthStatus)
+
+			// and call the next with our new context
+			r = r.WithContext(ctx)
+			next.ServeHTTP(w, r)
+		})
+	}
+}
+
+// ForContext finds the user from the context. REQUIRES Middleware to have run.
+func ForContext(ctx context.Context) *model.User {
+	raw, _ := ctx.Value(userCtxKey).(*model.User)
+	return raw
+}