@rivascva/dt-idl 1.1.65 → 1.1.67

package/go/models/constants.go

@@ -0,0 +1,7 @@
+package models
+
+// ContextKey is the type used to define keys for the request context.
+type ContextKey string
+
+// TokenKey is the key used to store the JWT token in the request context.
+const TokenKey = ContextKey("token")

package/go/utils/jwt/jwt.go

@@ -0,0 +1,21 @@
+package jwt
+
+import (
+	"fmt"
+
+	"github.com/golang-jwt/jwt/v5"
+)
+
+// Validates the given JWT token using the provided secret.
+func ValidateToken(token string, secret string) (*jwt.Token, error) {
+	// create a JWT parser with the HS256 signing method
+	parser := jwt.NewParser(jwt.WithValidMethods([]string{jwt.SigningMethodHS256.Alg()}))
+
+	// validate the JWT token
+	parsedToken, err := parser.Parse(token, func(t *jwt.Token) (any, error) { return []byte(secret), nil })
+	if err != nil {
+		return nil, fmt.Errorf("ValidateToken: unable to validate the JWT token: %w", err)
+	}
+
+	return parsedToken, nil
+}

package/go/utils/middlewares/middlewares.go

@@ -0,0 +1,57 @@
+package middlewares
+
+import (
+	"context"
+	"net/http"
+	"slices"
+	"strings"
+
+	"github.com/RivasCVA/dt-idl/go/models"
+	"github.com/RivasCVA/dt-idl/go/utils/jwt"
+	"github.com/RivasCVA/dt-idl/go/utils/logger"
+	"github.com/RivasCVA/dt-idl/go/utils/responder"
+)
+
+// Returns a middleware function that authenticates all requests except for the login endpoints.
+// It attaches the token to the request context.
+func GetAuthMiddleware(secret string) func(http.Handler) http.Handler {
+	responder := responder.NewStandardResponder(logger.NewConsoleLoggerWithPrefix("GetAuthMiddleware:"), "ERROR")
+	return func(next http.Handler) http.Handler {
+		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			// check if the request is for the login endpoint
+			if slices.Contains([]string{"/v1/login", "/v1/login/provider"}, r.URL.Path) {
+				next.ServeHTTP(w, r)
+				return
+			}
+
+			// check if the request has a bearer authorization header
+			authorizationHeader := r.Header.Get("Authorization")
+			arr := strings.Split(authorizationHeader, " ")
+			if len(arr) != 2 || arr[0] != "Bearer" {
+				responder.WriteError(w, http.StatusUnauthorized, "invalid authorization header")
+				return
+			}
+
+			// validate the JWT token
+			token, err := jwt.ValidateToken(arr[1], secret)
+			if err != nil {
+				responder.WriteError(w, http.StatusUnauthorized, "invalid token")
+				return
+			}
+
+			// set the token in the request context
+			ctx := context.WithValue(r.Context(), models.TokenKey, token)
+			r = r.WithContext(ctx)
+
+			next.ServeHTTP(w, r)
+		})
+	}
+}
+
+// Adds shared headers to all responses.
+func CommonHeaders(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Add("content-type", "application/json")
+		next.ServeHTTP(w, r)
+	})
+}

package/go.mod

@@ -1,3 +1,5 @@
 module github.com/RivasCVA/dt-idl
 
 go 1.23
+
+require github.com/golang-jwt/jwt/v5 v5.2.2

package/go.sum

@@ -0,0 +1,2 @@
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rivascva/dt-idl",
-  "version": "1.1.65",
+  "version": "1.1.67",
   "description": "Dream Trade - Interface Definition Language",
   "main": "dist/index.cjs.js",
   "module": "dist/index.esm.js",