feat(auth): Enhance Google OAuth flow with async email extraction and caching

imphnen-middleware/src/auth_middleware/mod.rs

@@ -4,7 +4,7 @@ use axum::{
 };
 use imphnen_iam::{UsersDetailQueryDto, UsersRepository};
 use imphnen_libs::AppState;
-use imphnen_utils::{common_response, extract_email};
+use imphnen_utils::{common_response, extract_email, extract_email_async};
 use std::convert::Infallible;
 
 pub async fn auth_middleware(
@@ -13,15 +13,24 @@ pub async fn auth_middleware(
 	next: Next,
 ) -> Result<Response, Infallible> {
 	let headers = req.headers();
+	
+	// Try synchronous email extraction first (for internal JWT tokens)
 	let email = match extract_email(headers) {
 		Some(email) => email,
 		None => {
-			return Ok(common_response(
-				StatusCode::UNAUTHORIZED,
-				"Invalid or expired token",
-			));
+			// If sync extraction fails, try async (for Google tokens)
+			match extract_email_async(headers).await {
+				Some(email) => email,
+				None => {
+					return Ok(common_response(
+						StatusCode::UNAUTHORIZED,
+						"Invalid or expired token",
+					));
+				}
+			}
 		}
 	};
+	
 	let repository = UsersRepository::new(&state);
 	let user: Option<UsersDetailQueryDto> =
 		match repository.query_user_by_email(email).await {

imphnen-middleware/src/permissions_middleware/mod.rs

@@ -5,7 +5,7 @@ use axum::{
 use futures::future::BoxFuture;
 use imphnen_iam::{AuthRepository, PermissionsEnum};
 use imphnen_libs::AppState;
-use imphnen_utils::{common_response, extract_email};
+use imphnen_utils::{common_response, extract_email, extract_email_async};
 use std::task::{Context, Poll};
 use tower::{Layer, Service};
 
@@ -59,15 +59,24 @@ where
 		let permissions = self.permissions.clone();
 		Box::pin(async move {
 			let headers = req.headers();
+			
+			// Try synchronous email extraction first (for internal JWT tokens)
 			let email = match extract_email(headers) {
 				Some(email) => email,
 				None => {
-					return Ok(common_response(
-						StatusCode::UNAUTHORIZED,
-						"Invalid or missing authorization token",
-					));
+					// If sync extraction fails, try async (for Google tokens)
+					match extract_email_async(headers).await {
+						Some(email) => email,
+						None => {
+							return Ok(common_response(
+								StatusCode::UNAUTHORIZED,
+								"Invalid or missing authorization token",
+							));
+						}
+					}
 				}
 			};
+			
 			let auth_repo = AuthRepository::new(&app_state);
 			let user = match auth_repo.query_get_stored_user(email).await {
 				Ok(user) => user,