Added auth middleware.

middleware/auth.go

@@ -0,0 +1,55 @@
+package middleware
+
+import (
+	"net/http"
+
+	"goweb/auth"
+	"goweb/context"
+	"goweb/ent"
+	"goweb/ent/user"
+
+	"github.com/labstack/echo/v4"
+)
+
+func LoadAuthenticatedUser(orm *ent.Client) echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(c echo.Context) error {
+			if userID, err := auth.GetUserID(c); err != nil {
+				u, err := orm.User.Query().
+					Where(user.ID(userID)).
+					First(c.Request().Context())
+
+				if err == nil {
+					c.Set(context.AuthenticatedUserKey, u)
+					c.Logger().Info("auth user loaded in to context: %d", userID)
+				}
+			}
+
+			return next(c)
+		}
+	}
+}
+
+func RequireAuthentication() echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(c echo.Context) error {
+			if u := c.Get(context.AuthenticatedUserKey); u == nil {
+				return echo.NewHTTPError(http.StatusUnauthorized, "Unauthorized")
+			}
+
+			return next(c)
+		}
+	}
+}
+
+func RequireNoAuthentication() echo.MiddlewareFunc {
+	return func(next echo.HandlerFunc) echo.HandlerFunc {
+		return func(c echo.Context) error {
+			if u := c.Get(context.AuthenticatedUserKey); u != nil {
+				return echo.NewHTTPError(http.StatusForbidden, "Forbidden")
+			}
+
+			return next(c)
+		}
+	}
+}