added: auth middleware

internal/router/middleware.go

@@ -0,0 +1,57 @@
+package router
+
+import (
+	"github.com/gin-gonic/gin"
+	log "github.com/sirupsen/logrus"
+	"merch-parser-api/internal/interfaces"
+	"merch-parser-api/internal/shared"
+	"merch-parser-api/pkg/responses"
+	"net/http"
+)
+
+type mwDeps struct {
+	prefix        string
+	excludeRoutes *map[string]shared.ExcludeRoute
+	tokenProv     interfaces.JWTProvider
+}
+
+func authMiddleware(deps mwDeps) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if excluded(deps.prefix, c.FullPath(), c.Request.Method, deps.excludeRoutes) {
+			log.WithField("msg", "route excluded from auth check").Info("MW | Authorization")
+			c.Next()
+			return
+		}
+
+		token := c.GetHeader("Authorization")
+		if token == "" {
+			c.JSON(http.StatusUnauthorized, responses.ErrorResponse401{Error: "Authorization token is required"})
+			log.WithField("msg", "Authorization token is required").Error("MW | Authorization")
+			c.Abort()
+			return
+		}
+
+		userUuid, refreshUuid, err := deps.tokenProv.Parse(token)
+		if err != nil {
+			c.JSON(http.StatusUnauthorized, responses.ErrorResponse401{Error: err.Error()})
+			log.WithField("msg", "error parsing jwt").Error("MW | Authorization")
+			c.Abort()
+			return
+		}
+
+		c.Set("userUuid", userUuid)
+		if refreshUuid != "" {
+			c.Set("refreshUuid", refreshUuid)
+		}
+
+		log.WithFields(log.Fields{
+			"userUuid":    userUuid,
+			"refreshUuid": refreshUuid,
+		}).Debug("MW | Parsed uuids")
+
+		if !c.IsAborted() {
+			log.WithField("msg", "context aborted").Info("MW | Authorization")
+			c.Next()
+		}
+	}
+}