81 lines
1.5 KiB
Go
81 lines
1.5 KiB
Go
package middleware
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
"spend-sparrow/service"
|
|
"spend-sparrow/types"
|
|
)
|
|
|
|
type ContextKey string
|
|
|
|
var SessionKey ContextKey = "session"
|
|
var UserKey ContextKey = "user"
|
|
|
|
func Authenticate(service service.Auth) func(http.Handler) http.Handler {
|
|
return func(next http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
sessionId := getSessionID(r)
|
|
session, user, _ := service.SignInSession(sessionId)
|
|
|
|
var err error
|
|
// Always sign in anonymous
|
|
// This way, we can always generate csrf tokens
|
|
if session == nil {
|
|
session, err = service.SignInAnonymous()
|
|
if err != nil {
|
|
http.Error(w, "Internal Server Error", http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
cookie := CreateSessionCookie(session.Id)
|
|
http.SetCookie(w, &cookie)
|
|
}
|
|
|
|
ctx := r.Context()
|
|
ctx = context.WithValue(ctx, UserKey, user)
|
|
ctx = context.WithValue(ctx, SessionKey, session)
|
|
|
|
next.ServeHTTP(w, r.WithContext(ctx))
|
|
})
|
|
}
|
|
}
|
|
|
|
func GetUser(r *http.Request) *types.User {
|
|
obj := r.Context().Value(UserKey)
|
|
if obj == nil {
|
|
return nil
|
|
}
|
|
|
|
user, ok := obj.(*types.User)
|
|
if !ok {
|
|
return nil
|
|
}
|
|
|
|
return user
|
|
}
|
|
|
|
func GetSession(r *http.Request) *types.Session {
|
|
obj := r.Context().Value(SessionKey)
|
|
if obj == nil {
|
|
return nil
|
|
}
|
|
|
|
session, ok := obj.(*types.Session)
|
|
if !ok {
|
|
return nil
|
|
}
|
|
|
|
return session
|
|
}
|
|
|
|
func getSessionID(r *http.Request) string {
|
|
cookie, err := r.Cookie("id")
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
|
|
return cookie.Value
|
|
}
|