1 files changed, 34 insertions, 0 deletions

diff --git a/web/middleware/api_auth.go b/web/middleware/api_auth.go
new file mode 100644
index 0000000..b854297
--- /dev/null
+++ b/web/middleware/api_auth.go
@@ -0,0 +1,34 @@
+package middleware
+
+import (
+        "net/http"
+        "strings"
+
+        "github.com/gin-gonic/gin"
+)
+
+const API_AUTH_USER_KEY = "APIAuthUserKey"
+
+func ApiAuthMiddleware(c *gin.Context) {
+        cfg := GetServerConfig(c)
+
+        auth := strings.Split(c.Request.Header.Get("Authorization"), " ")
+
+        if len(auth) != 2 || auth[0] != "Bearer" {
+                c.AbortWithStatus(http.StatusUnauthorized)
+                return
+        }
+
+        if user, ok := cfg.ApiSecrets[auth[1]]; ok {
+                c.Set(API_AUTH_USER_KEY, user)
+        } else {
+                c.AbortWithStatus(http.StatusUnauthorized)
+                return
+        }
+
+        c.Next()
+}
+
+func GetAPIAuthUser(c *gin.Context) string {
+        return c.GetString(API_AUTH_USER_KEY)
+}