teldrive/routes/middleware.go
2023-09-21 18:28:32 +05:30

43 lines
731 B
Go

package routes
import (
"net/http"
"time"
"github.com/divyam234/teldrive/utils/auth"
"github.com/gin-gonic/gin"
"github.com/go-jose/go-jose/v3/jwt"
)
func Authmiddleware(c *gin.Context) {
cookie, err := c.Request.Cookie("user-session")
if err != nil {
c.JSON(http.StatusUnauthorized, gin.H{"error": "missing session cookie"})
c.Abort()
return
}
now := time.Now().UTC()
jwePayload, err := auth.Decode(cookie.Value)
if err != nil {
c.JSON(http.StatusUnauthorized, gin.H{"error": err.Error()})
c.Abort()
return
}
if *jwePayload.Expiry < *jwt.NewNumericDate(now) {
c.JSON(http.StatusUnauthorized, gin.H{"error": "token expired"})
c.Abort()
return
}
c.Set("jwtUser", jwePayload)
c.Next()
}