45 lines
925 B
Go
45 lines
925 B
Go
|
package router
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"net/http"
|
||
|
|
"strings"
|
||
|
|
|
||
|
|
log "github.com/sirupsen/logrus"
|
||
|
|
)
|
||
|
|
|
||
|
|
func AuthenticationMiddleware(next http.Handler) http.Handler {
|
||
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
||
|
|
bearerTokenRaw := r.Header.Get("Authorization")
|
||
|
|
splitToken := strings.Split(bearerTokenRaw, "Bearer")
|
||
|
|
if len(splitToken) != 2 {
|
||
|
|
w.WriteHeader(http.StatusBadRequest)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
accessTokenString := strings.TrimSpace(splitToken[1])
|
||
|
|
accessClaims, err := ValidateAccessToken(accessTokenString)
|
||
|
|
if err != nil {
|
||
|
|
if _, ok := err.(*ErrExpiredToken); ok {
|
||
|
|
w.Write([]byte(`{
|
||
|
|
"data": {},
|
||
|
|
"errors": [
|
||
|
|
{
|
||
|
|
"extensions": {
|
||
|
|
"code": "UNAUTHENTICATED"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}`))
|
||
|
|
return
|
||
|
|
}
|
||
|
|
log.Error(err)
|
||
|
|
w.WriteHeader(http.StatusBadRequest)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
ctx := context.WithValue(r.Context(), "accessClaims", accessClaims)
|
||
|
|
|
||
|
|
next.ServeHTTP(w, r.WithContext(ctx))
|
||
|
|
})
|
||
|
|
}
|