52 lines
1.3 KiB
Go
52 lines
1.3 KiB
Go
|
package middleware
|
||
|
|
|
||
|
|
import (
|
||
|
|
"net/http"
|
||
|
|
"strings"
|
||
|
|
|
||
|
|
"github.com/gin-gonic/gin"
|
||
|
|
|
||
|
|
"dating-app/internal/repository"
|
||
|
|
"dating-app/internal/utils"
|
||
|
|
)
|
||
|
|
|
||
|
|
const (
|
||
|
|
ContextUserKey = "current_user"
|
||
|
|
)
|
||
|
|
|
||
|
|
// AuthRequired توکن access رو از هدر Authorization میخونه، اعتبارسنجی میکنه
|
||
|
|
// و کاربر مربوطه رو توی context قرار میده.
|
||
|
|
func AuthRequired(jwtManager *utils.JWTManager, userRepo *repository.UserRepository) gin.HandlerFunc {
|
||
|
|
return func(c *gin.Context) {
|
||
|
|
header := c.GetHeader("Authorization")
|
||
|
|
if header == "" || !strings.HasPrefix(header, "Bearer ") {
|
||
|
|
utils.Fail(c, http.StatusUnauthorized, "توکن احراز هویت ارسال نشده است", nil)
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
tokenStr := strings.TrimPrefix(header, "Bearer ")
|
||
|
|
claims, err := jwtManager.ParseAccessToken(tokenStr)
|
||
|
|
if err != nil {
|
||
|
|
utils.Fail(c, http.StatusUnauthorized, "توکن نامعتبر یا منقضی شده است", nil)
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
user, err := userRepo.FindByID(claims.UserID)
|
||
|
|
if err != nil {
|
||
|
|
utils.Fail(c, http.StatusUnauthorized, "کاربر یافت نشد", nil)
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
if !user.IsActive {
|
||
|
|
utils.Fail(c, http.StatusForbidden, "حساب کاربری غیرفعال است", nil)
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
c.Set(ContextUserKey, user)
|
||
|
|
c.Next()
|
||
|
|
}
|
||
|
|
}
|