54 lines
1.3 KiB
Rust
54 lines
1.3 KiB
Rust
use axum::{
|
|
Extension, extract::Request, http::StatusCode, middleware::Next,
|
|
response::Response,
|
|
};
|
|
use imphnen_iam::{UsersDetailQueryDto, UsersRepository};
|
|
use imphnen_libs::AppState;
|
|
use imphnen_utils::{common_response, extract_email, extract_email_async};
|
|
use std::convert::Infallible;
|
|
|
|
pub async fn auth_middleware(
|
|
Extension(state): Extension<AppState>,
|
|
mut req: Request,
|
|
next: Next,
|
|
) -> Result<Response, Infallible> {
|
|
let headers = req.headers();
|
|
|
|
// Try synchronous email extraction first (for internal JWT tokens)
|
|
let email = match extract_email(headers) {
|
|
Some(email) => email,
|
|
None => {
|
|
// If sync extraction fails, try async (for Google tokens)
|
|
match extract_email_async(headers).await {
|
|
Some(email) => email,
|
|
None => {
|
|
return Ok(common_response(
|
|
StatusCode::UNAUTHORIZED,
|
|
"Invalid or expired token",
|
|
));
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
let repository = UsersRepository::new(&state);
|
|
let user: Option<UsersDetailQueryDto> =
|
|
match repository.query_user_by_email(email).await {
|
|
Ok(user) => Some(user),
|
|
Err(err) => {
|
|
return Ok(common_response(
|
|
StatusCode::INTERNAL_SERVER_ERROR,
|
|
&err.to_string(),
|
|
));
|
|
}
|
|
};
|
|
if user.is_none() {
|
|
return Ok(common_response(
|
|
StatusCode::UNAUTHORIZED,
|
|
"Unauthorized user",
|
|
));
|
|
}
|
|
req.extensions_mut().insert(user.unwrap());
|
|
Ok(next.run(req).await)
|
|
}
|