forked from TrueCloudLab/frostfs-s3-gw
40 lines
1.1 KiB
Go
40 lines
1.1 KiB
Go
package api
|
|
|
|
import (
|
|
"context"
|
|
"net/http"
|
|
|
|
"github.com/gorilla/mux"
|
|
"github.com/nspcc-dev/neofs-s3-gw/api/auth"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
// KeyWrapper is wrapper for context keys.
|
|
type KeyWrapper string
|
|
|
|
// BearerTokenKey is an ID used to store bearer token in a context.
|
|
var BearerTokenKey = KeyWrapper("__context_bearer_token_key")
|
|
|
|
// AttachUserAuth adds user authentication via center to router using log for logging.
|
|
func AttachUserAuth(router *mux.Router, center auth.Center, log *zap.Logger) {
|
|
router.Use(func(h http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
var ctx context.Context
|
|
token, err := center.Authenticate(r)
|
|
if err != nil {
|
|
if err == auth.ErrNoAuthorizationHeader {
|
|
log.Debug("couldn't receive bearer token, using neofs-key")
|
|
ctx = r.Context()
|
|
} else {
|
|
log.Error("failed to pass authentication", zap.Error(err))
|
|
WriteErrorResponse(r.Context(), w, GetAPIError(ErrAccessDenied), r.URL)
|
|
return
|
|
}
|
|
} else {
|
|
ctx = context.WithValue(r.Context(), BearerTokenKey, token)
|
|
}
|
|
|
|
h.ServeHTTP(w, r.WithContext(ctx))
|
|
})
|
|
})
|
|
}
|