Dealer/pkg/hyper/auth_adaptor.go

package hyper

import (
	"strings"
	"time"

	"gorm.io/gorm"

	"git.solsynth.dev/hydrogen/dealer/pkg/proto"
	"github.com/gofiber/fiber/v2"
	jsoniter "github.com/json-iterator/go"
)

const (
	CookieAtk = "__hydrogen_atk"
	CookieRtk = "__hydrogen_rtk"
)

func (v *HyperConn) AuthMiddleware(c *fiber.Ctx) error {
	var atk string
	if cookie := c.Cookies(CookieAtk); len(cookie) > 0 {
		atk = cookie
	}
	if header := c.Get(fiber.HeaderAuthorization); len(header) > 0 {
		tk := strings.Replace(header, "Bearer", "", 1)
		atk = strings.TrimSpace(tk)
	}
	if tk := c.Query("tk"); len(tk) > 0 {
		atk = strings.TrimSpace(tk)
	}

	c.Locals("p_token", atk)

	rtk := c.Cookies(CookieRtk)
	if user, newAtk, newRtk, err := v.DoAuthenticate(atk, rtk); err == nil {
		if newAtk != atk {
			c.Cookie(&fiber.Cookie{
				Name:     CookieAtk,
				Value:    newAtk,
				SameSite: "Lax",
				Expires:  time.Now().Add(60 * time.Minute),
				Path:     "/",
			})
			c.Cookie(&fiber.Cookie{
				Name:     CookieRtk,
				Value:    newRtk,
				SameSite: "Lax",
				Expires:  time.Now().Add(24 * 30 * time.Hour),
				Path:     "/",
			})
		}
		c.Locals("p_user", user)
	}

	return c.Next()
}

func LinkAccountMiddleware[T any](tx *gorm.DB, table string, adaptor func(u BaseUser) T) func(c *fiber.Ctx) error {
	return func(c *fiber.Ctx) error {
		if val, ok := c.Locals("p_user").(*proto.UserInfo); ok {
			if account, err := LinkAccount(tx, table, val); err != nil {
				return fiber.NewError(fiber.StatusInternalServerError, err.Error())
			} else {
				c.Locals("user", adaptor(account))
			}
		}

		return c.Next()
	}
}

func (v *HyperConn) EnsureAuthenticated(c *fiber.Ctx) error {
	if _, ok := c.Locals("p_user").(*proto.UserInfo); !ok {
		return fiber.NewError(fiber.StatusUnauthorized)
	}
	return nil
}

func (v *HyperConn) EnsureGrantedPerm(c *fiber.Ctx, key string, val any) error {
	if err := v.EnsureAuthenticated(c); err != nil {
		return err
	}
	encodedVal, _ := jsoniter.Marshal(val)
	if err := v.CheckPermGranted(c.Locals("p_token").(string), key, encodedVal); err != nil {
		return fiber.NewError(fiber.StatusForbidden, err.Error())
	}
	return nil
}