Files
silo-server/internal/api/middleware/viewer_access.go
T

83 lines
2.4 KiB
Go

package middleware
import (
"context"
"encoding/json"
"errors"
"net/http"
"github.com/Silo-Server/silo-server/internal/access"
"github.com/Silo-Server/silo-server/internal/auth"
)
// ViewerResolver resolves the effective viewer access scope for a request.
type ViewerResolver interface {
Resolve(ctx context.Context, input access.ResolveInput) (access.Scope, error)
}
// ViewerAccessMiddleware resolves and stores viewer access scope in context.
type ViewerAccessMiddleware struct {
resolver ViewerResolver
}
// NewViewerAccessMiddleware creates a middleware from a scope resolver.
func NewViewerAccessMiddleware(resolver ViewerResolver) *ViewerAccessMiddleware {
return &ViewerAccessMiddleware{resolver: resolver}
}
// RequireViewerAccess resolves viewer scope from auth + profile headers.
func (m *ViewerAccessMiddleware) RequireViewerAccess(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
claims := GetClaims(r.Context())
if claims == nil {
writeUnauthorized(w, "Authentication required")
return
}
profileID := r.Header.Get("X-Profile-Id")
input := access.ResolveInput{
UserID: claims.UserID,
SessionID: claims.SessionID,
ProfileID: profileID,
ProfileToken: r.Header.Get("X-Profile-Token"),
SkipPINVerification: claims.TokenType == auth.TokenTypeAPIKey,
}
scope, err := m.resolver.Resolve(r.Context(), input)
if err != nil {
switch {
case errors.Is(err, access.ErrProfileUnverified):
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(http.StatusForbidden)
_ = json.NewEncoder(w).Encode(errorResponse{
Error: "profile_unverified",
Message: "Profile verification required",
})
return
case errors.Is(err, access.ErrProfileNotFound):
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(http.StatusNotFound)
_ = json.NewEncoder(w).Encode(errorResponse{
Error: "not_found",
Message: "Profile not found",
})
return
default:
w.Header().Set("Content-Type", "application/json")
w.WriteHeader(http.StatusInternalServerError)
_ = json.NewEncoder(w).Encode(errorResponse{
Error: "internal_error",
Message: "Failed to resolve viewer access",
})
return
}
}
ctx := access.SetScope(r.Context(), scope)
if profileID != "" {
ctx = SetProfileID(ctx, profileID)
}
next.ServeHTTP(w, r.WithContext(ctx))
})
}