aboutsummaryrefslogtreecommitdiff
path: root/auth/middlewares.go
diff options
context:
space:
mode:
authorMartin Kagamino Lehoux <martin@lehoux.net>2023-10-24 08:38:40 +0200
committerMartin Kagamino Lehoux <martin@lehoux.net>2023-10-24 08:38:40 +0200
commita9927763f43d59c418b264790ccee59defe8ca29 (patch)
tree5dfc4f1f1f29d1ef1cbca3406bf57d1667b93f76 /auth/middlewares.go
parented23d402fec268e163ec895748f43e3254ba3dfd (diff)
refactor: Rename packages for clarityv0.3.0
Diffstat (limited to 'auth/middlewares.go')
-rw-r--r--auth/middlewares.go92
1 files changed, 0 insertions, 92 deletions
diff --git a/auth/middlewares.go b/auth/middlewares.go
deleted file mode 100644
index 1534b16..0000000
--- a/auth/middlewares.go
+++ /dev/null
@@ -1,92 +0,0 @@
-package auth
-
-import (
- "context"
- "errors"
- "net/http"
- "strconv"
- "strings"
- "time"
-
- "github.com/martinlehoux/kagamigo/core"
- "golang.org/x/exp/slog"
-)
-
-var (
- ErrUserNotLoggedIn = errors.New("user not logged in")
- ErrCookieExpired = errors.New("cookie expired")
- ErrBadCookie = errors.New("invalid cookie")
-)
-
-type userContext struct{}
-
-func UserFromContext[U any](ctx context.Context) (U, bool) {
- user, ok := ctx.Value(userContext{}).(U)
- return user, ok
-}
-
-func LoginFromContext[U core.WithLanguage](ctx context.Context) core.Login[U] {
- user, ok := UserFromContext[U](ctx)
- return core.LoginFromUser(user, ok)
-}
-
-func Unauthorized(w http.ResponseWriter, err error) {
- w.WriteHeader(http.StatusUnauthorized)
- if err != nil {
- _, err = w.Write([]byte(err.Error()))
- core.Expect(err, "error writing response")
- }
-}
-
-func CookieAuthMiddleware(loadUser func(context.Context, core.ID) (any, error), config AuthConfig) func(http.Handler) http.Handler {
- return func(next http.Handler) http.Handler {
- return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
- ctx := r.Context()
- cookie, err := r.Cookie("authentication")
- if errors.Is(err, http.ErrNoCookie) {
- next.ServeHTTP(w, r)
- return
- }
- core.Expect(err, "error reading cookie")
-
- authentication, err := decrypt(config.CookieSecret, cookie.Value)
- if err != nil {
- err = core.Wrap(err, "error decrypting cookie")
- slog.Warn(err.Error())
- http.Error(w, err.Error(), http.StatusBadRequest)
- return
- }
- parts := strings.Split(authentication, ":")
- if len(parts) != 2 {
- slog.Warn(ErrBadCookie.Error())
- http.Error(w, ErrBadCookie.Error(), http.StatusBadRequest)
- return
- }
- userId, err := core.ParseID(parts[0])
- if err != nil {
- err = core.Wrap(err, "error parsing user id")
- slog.Warn(err.Error())
- http.Error(w, err.Error(), http.StatusBadRequest)
- return
- }
- expiresAtSeconds, err := strconv.Atoi(parts[1])
- if err != nil {
- err = core.Wrap(err, "error parsing expires at")
- slog.Warn(err.Error())
- http.Error(w, err.Error(), http.StatusBadRequest)
- return
- }
- expiresAt := time.Unix(int64(expiresAtSeconds), 0)
- if time.Now().After(expiresAt) {
- slog.Warn(ErrCookieExpired.Error())
- http.Error(w, ErrCookieExpired.Error(), http.StatusUnauthorized)
- return
- }
- user, err := loadUser(ctx, userId)
- core.Expect(err, "error loading user")
-
- ctx = context.WithValue(ctx, userContext{}, user)
- next.ServeHTTP(w, r.WithContext(ctx))
- })
- }
-}