migrate orion repo into monorepo structure

go/internal/middleware/auth.go

@@ -0,0 +1,67 @@
+package middleware
+
+import (
+	"context"
+	"log/slog"
+	"net/http"
+	"strings"
+
+	"github.com/flowy-live/llink/internal/auth"
+)
+
+type contextKey string
+
+const emailContextKey contextKey = "email"
+
+// WithEmail adds the email to the context
+func WithEmail(ctx context.Context, email string) context.Context {
+	return context.WithValue(ctx, emailContextKey, email)
+}
+
+// EmailFromContext extracts the email from the context
+func EmailFromContext(ctx context.Context) (string, bool) {
+	email, ok := ctx.Value(emailContextKey).(string)
+	return email, ok
+}
+
+// Auth returns a middleware that validates the session token and adds the email to the context
+func Auth(authSvc auth.AuthService) func(http.Handler) http.Handler {
+	return func(next http.Handler) http.Handler {
+		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			token := extractBearerToken(r)
+			if token == "" {
+				http.Error(w, "unauthorized", http.StatusUnauthorized)
+				return
+			}
+
+			email, err := authSvc.GetSession(r.Context(), token)
+			if err != nil {
+				http.Error(w, "unauthorized", http.StatusUnauthorized)
+				return
+			}
+
+			// Auto-extend session
+			if err := authSvc.ExtendSession(r.Context(), token); err != nil {
+				slog.Warn("failed to extend session", "error", err)
+			}
+
+			ctx := WithEmail(r.Context(), email)
+			next.ServeHTTP(w, r.WithContext(ctx))
+		})
+	}
+}
+
+// extractBearerToken extracts the token from the Authorization header
+func extractBearerToken(r *http.Request) string {
+	authHeader := r.Header.Get("Authorization")
+	if authHeader == "" {
+		return ""
+	}
+
+	parts := strings.SplitN(authHeader, " ", 2)
+	if len(parts) != 2 || !strings.EqualFold(parts[0], "Bearer") {
+		return ""
+	}
+
+	return parts[1]
+}