51 lines
1.3 KiB
Go
51 lines
1.3 KiB
Go
package middlewares
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
|
|
"go-microservices/api-gateway/internal/clients"
|
|
pb "go-microservices/proto/auth"
|
|
|
|
"github.com/gofiber/fiber/v2"
|
|
)
|
|
|
|
// JWTMiddleware returns a Fiber middleware that validates JWT via the auth service gRPC.
|
|
func JWTMiddleware(authClient *clients.AuthClient) fiber.Handler {
|
|
return func(c *fiber.Ctx) error {
|
|
// Try to get Authorization header (Fiber handles case-insensitivity)
|
|
authHeader := c.Get("Authorization")
|
|
var token string
|
|
|
|
if authHeader != "" {
|
|
parts := strings.Split(authHeader, " ")
|
|
if len(parts) == 2 && parts[0] == "Bearer" {
|
|
token = parts[1]
|
|
}
|
|
}
|
|
|
|
// Fallback to cookie if no Bearer token found
|
|
if token == "" {
|
|
token = c.Cookies("access_token")
|
|
}
|
|
|
|
if token == "" {
|
|
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "missing token"})
|
|
}
|
|
|
|
// Validate token via gRPC
|
|
resp, err := authClient.ValidateToken(context.Background(), &pb.ValidateTokenRequest{Token: token})
|
|
if err != nil {
|
|
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "token validation failed"})
|
|
}
|
|
|
|
if !resp.Valid {
|
|
return c.Status(fiber.StatusUnauthorized).JSON(fiber.Map{"error": "invalid token"})
|
|
}
|
|
|
|
c.Locals("userID", resp.UserId)
|
|
|
|
return c.Next()
|
|
}
|
|
}
|