initial commit from original sev version

internal/middlewares/authenticate.go

@@ -0,0 +1,43 @@
+package middlewares
+
+import (
+	"context"
+	"net/http"
+	"strings"
+
+	"abuse_registration_poc/internal/handlers"
+	"abuse_registration_poc/internal/utils"
+)
+
+type contextKey string
+
+const (
+	RoleContextKey   contextKey = "role"
+	UserIDContextKey contextKey = "userId"
+)
+
+func Authenticate(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
+		token := strings.TrimSpace(request.Header.Get("Authorization"))
+		if token == "" {
+			handlers.WriteJSON(writer, http.StatusUnauthorized, map[string]string{"message": "Not authorized."})
+			return
+		}
+		token = strings.TrimPrefix(token, "Bearer ")
+
+		userID, role, err := utils.VerifyToken(token)
+		if err != nil {
+			handlers.WriteJSON(writer, http.StatusUnauthorized, map[string]string{"message": "Not authorized."})
+			return
+		}
+
+		ctx := context.WithValue(request.Context(), RoleContextKey, role)
+		ctx = context.WithValue(ctx, UserIDContextKey, userID)
+		next.ServeHTTP(writer, request.WithContext(ctx))
+	})
+}
+
+func RoleFromContext(ctx context.Context) (string, bool) {
+	role, ok := ctx.Value(RoleContextKey).(string)
+	return role, ok
+}