71 lines
1.7 KiB
Go
71 lines
1.7 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"log"
|
|
"net/http"
|
|
"strings"
|
|
|
|
"com.sismedika.com.absensi/graph/model"
|
|
"com.sismedika.com.absensi/pkg/jwt"
|
|
)
|
|
|
|
var userCtxKey = &contextKey{"user"}
|
|
|
|
type contextKey struct {
|
|
name string
|
|
}
|
|
|
|
type AuthRequest struct {
|
|
isAuthenticated bool
|
|
staff model.Staff
|
|
}
|
|
|
|
func Middleware() func(http.Handler) http.Handler {
|
|
return func(next http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
header := r.Header.Get("Authorization")
|
|
AuthStatus := AuthRequest{isAuthenticated: false}
|
|
// Allow unauthenticated users in
|
|
if header == "" {
|
|
ctx := context.WithValue(r.Context(), userCtxKey, &AuthStatus)
|
|
r = r.WithContext(ctx)
|
|
next.ServeHTTP(w, r)
|
|
return
|
|
}
|
|
|
|
// validate jwt token
|
|
tokenParts := strings.Split(header, " ")
|
|
var tokenStr string
|
|
if len(tokenParts) == 2 && tokenParts[0] == "Bearer" {
|
|
tokenStr = tokenParts[1]
|
|
}
|
|
email, idGoogleSignIn, err := jwt.ParseToken(tokenStr)
|
|
if err != nil {
|
|
log.Printf("ParseToken: %v\n", err)
|
|
ctx := context.WithValue(r.Context(), userCtxKey, &AuthStatus)
|
|
r = r.WithContext(ctx)
|
|
next.ServeHTTP(w, r)
|
|
// boom.Unathorized(w, fmt.Errorf("AUTHORIZATION_HEADER_INVALID"))
|
|
return
|
|
}
|
|
AuthStatus.staff = model.Staff{
|
|
Email: email,
|
|
IDGoogleSignIn: idGoogleSignIn,
|
|
}
|
|
// put it in context
|
|
ctx := context.WithValue(r.Context(), userCtxKey, &AuthStatus)
|
|
|
|
// and call the next with our new context
|
|
r = r.WithContext(ctx)
|
|
next.ServeHTTP(w, r)
|
|
})
|
|
}
|
|
}
|
|
|
|
// ForContext finds the user from the context. REQUIRES Middleware to have run.
|
|
func ForContext(ctx context.Context) *model.Staff {
|
|
raw, _ := ctx.Value(userCtxKey).(*model.Staff)
|
|
return raw
|
|
}
|