init push

internal/transport/http/middleware/auth_middleware.go

@@ -0,0 +1,30 @@
+package middleware
+
+import (
+	"github.com/gofiber/fiber/v2"
+
+	"wucher/internal/service"
+	"wucher/internal/shared/pkg/appctx"
+	"wucher/internal/shared/pkg/apperrorsx"
+)
+
+func AuthRequired(svc *service.AuthService) fiber.Handler {
+	return func(c *fiber.Ctx) error {
+		if svc == nil {
+			e := apperrorsx.New(apperrorsx.ErrUserUnauthorized)
+			e.Message = "auth service not configured"
+			return apperrorsx.Write(c, e)
+		}
+
+		ctx := c.UserContext()
+		for _, candidate := range service.CookieValues(c.Get(fiber.HeaderCookie), svc.AccessCookieName()) {
+			userID, err := svc.ParseAccessToken(ctx, candidate)
+			if err == nil {
+				c.Locals("user_id", userID)
+				c.SetUserContext(appctx.WithUserID(ctx, userID))
+				return c.Next()
+			}
+		}
+		return apperrorsx.Write(c, apperrorsx.New(apperrorsx.ErrTokenInvalid))
+	}
+}