teldrive/routes/middleware.go
2023-08-12 16:51:42 +05:30

37 lines
737 B
Go

package routes
import (
"net/http"
"time"
"github.com/divyam234/teldrive-go/services"
"github.com/divyam234/teldrive-go/utils/auth"
"github.com/gin-gonic/gin"
"github.com/go-jose/go-jose/v3/jwt"
)
func Authmiddleware(c *gin.Context) {
cookie, err := c.Request.Cookie(services.GetUserSessionCookieName(c))
if err != nil {
c.JSON(http.StatusUnauthorized, gin.H{"error": "missing session cookie"})
}
now := time.Now().UTC()
jwePayload, err := auth.Decode(cookie.Value)
if err != nil {
c.JSON(http.StatusUnauthorized, gin.H{"error": err.Error()})
}
if *jwePayload.Expiry < *jwt.NewNumericDate(now) {
c.JSON(http.StatusUnauthorized, gin.H{"error": "token expired"})
}
c.Set("jwtUser", jwePayload)
c.Next()
}