feat: add middleware

src/apps/v1/auth/auth_middleware.rs

@@ -0,0 +1,65 @@
+use crate::{common_response, decode_access_token, AppState};
+use axum::{
+	extract::Request,
+	http::{header::AUTHORIZATION, StatusCode},
+	middleware::Next,
+	response::Response,
+	Extension,
+};
+use std::convert::Infallible;
+
+use super::{AuthQueryByEmailResponse, AuthRepository};
+
+pub async fn auth_middleware(
+	Extension(state): Extension<AppState>,
+	mut req: Request,
+	next: Next,
+) -> Result<Response, Infallible> {
+	let auth_header = match req.headers().get(AUTHORIZATION) {
+		Some(h) => h.to_str().unwrap_or_default(),
+		None => {
+			return Ok(common_response(
+				StatusCode::UNAUTHORIZED,
+				"You are not authorized",
+			));
+		}
+	};
+
+	let token = auth_header.strip_prefix("Bearer ").unwrap_or("");
+
+	let token_data = match decode_access_token(token) {
+		Ok(data) => data,
+		Err(err) => {
+			return Ok(common_response(
+				StatusCode::UNAUTHORIZED,
+				&format!("Invalid or expired token: {}", &err.to_string()),
+			));
+		}
+	};
+
+	let repository = AuthRepository::new(&state);
+
+	let user: Option<AuthQueryByEmailResponse> = match repository
+		.query_user_by_email(token_data.claims.sub.clone())
+		.await
+	{
+		Ok(user) => Some(user),
+		Err(err) => {
+			return Ok(common_response(
+				StatusCode::INTERNAL_SERVER_ERROR,
+				&format!("DB error: {}", err),
+			))
+		}
+	};
+
+	if user.is_none() {
+		return Ok(common_response(
+			StatusCode::UNAUTHORIZED,
+			"Unauthorized user",
+		));
+	}
+
+	req.extensions_mut().insert(user.unwrap());
+
+	Ok(next.run(req).await)
+}

src/apps/v1/auth/auth_service.rs

@@ -7,7 +7,7 @@ use super::{
 use crate::{
 	common_response, encode_access_token, encode_refresh_token, hash_password,
 	success_response, v1::UsersItemDto, verify_password, AppState,
-	ResponseSuccessDto, TokenSub,
+	ResponseSuccessDto,
 };
 
 pub struct AuthService;
@@ -31,15 +31,8 @@ impl AuthService {
 					);
 				}
 
-				let access_token = encode_access_token(TokenSub {
-					email: payload.email.clone(),
-					role_name: "Admin".to_string(),
-				});
-
-				let refresh_token = encode_refresh_token(TokenSub {
-					email: payload.email.clone(),
-					role_name: "Admin".to_string(),
-				});
+				let access_token = encode_access_token(payload.email.clone());
+				let refresh_token = encode_refresh_token(payload.email.clone());
 
 				let response = ResponseSuccessDto {
 					data: AuthLoginResponsetDto {