Files
2026-03-14 18:46:48 +01:00

32 lines
713 B
Go

package middleware
import (
"net/http"
"strings"
"zardzul/music-index/utils"
"github.com/gin-gonic/gin"
)
func JWTAuth(secret string) gin.HandlerFunc {
return func(c *gin.Context) {
authHeader := c.GetHeader("Authorization")
parts := strings.SplitN(authHeader, " ", 2)
if len(parts) != 2 || parts[0] != "Bearer" {
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "missing or invalid authorization header"})
return
}
claims, err := utils.ValidateToken(secret, parts[1])
if err != nil {
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "invalid token"})
return
}
c.Set("user_id", claims.Subject)
c.Set("user_name", claims.UserName)
c.Next()
}
}