frostfs-s3-gw/api/user-auth.go

package api

import (
	"context"
	"net/http"

	"github.com/gorilla/mux"
	"github.com/nspcc-dev/neofs-s3-gw/api/auth"
	"go.uber.org/zap"
)

// KeyWrapper is wrapper for context keys.
type KeyWrapper string

// GateData is an ID used to store GateData in a context.
var GateData = KeyWrapper("__context_gate_data_key")

// AttachUserAuth adds user authentication via center to router using log for logging.
func AttachUserAuth(router *mux.Router, center auth.Center, log *zap.Logger) {
	router.Use(func(h http.Handler) http.Handler {
		return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
			var ctx context.Context
			tokens, err := center.Authenticate(r)
			if err != nil {
				if err == auth.ErrNoAuthorizationHeader {
					log.Debug("couldn't receive bearer token, using neofs-key")
					ctx = r.Context()
				} else {
					log.Error("failed to pass authentication", zap.Error(err))
					WriteErrorResponse(r.Context(), w, GetAPIError(ErrAccessDenied), r.URL)
					return
				}
			} else {
				ctx = context.WithValue(r.Context(), GateData, tokens)
			}

			h.ServeHTTP(w, r.WithContext(ctx))
		})
	})
}