lmrc-cli 0.3.16

CLI tool for scaffolding LMRC Stack infrastructure projects
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48

//! Infrastructure authentication middleware

use axum::{
    extract::{Request, State},
    http::StatusCode,
    middleware::Next,
    response::Response,
};
use cookie::Cookie;

use crate::error::AppError;
use crate::state::AppState;

/// Middleware to validate infrastructure sessions
pub async fn infra_auth_middleware(
    State(state): State<AppState>,
    mut request: Request,
    next: Next,
) -> Result<Response, AppError> {
    // Extract session token from cookie
    let headers = request.headers();
    let cookie_header = headers
        .get("cookie")
        .and_then(|value| value.to_str().ok())
        .unwrap_or("");

    let session_token = Cookie::split_parse(cookie_header)
        .filter_map(|cookie| cookie.ok())
        .find(|cookie| cookie.name() == "infra_session")
        .map(|cookie| cookie.value().to_string());

    let session_token = session_token.ok_or_else(|| {
        AppError::Unauthorized("Missing session token".to_string())
    })?;

    // Validate session
    let user = state
        .infra_auth
        .validate_session(&session_token)
        .await?
        .ok_or_else(|| AppError::Unauthorized("Invalid or expired session".to_string()))?;

    // Attach user and session token to request
    request.extensions_mut().insert(user);
    request.extensions_mut().insert(session_token);

    Ok(next.run(request).await)
}