Add auth middleware

fabiante · Sep 24, 2023 · adc4abf · adc4abf
1 parent 67da943
commit adc4abf
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/api/server_admin.go b/api/server_admin.go
@@ -48,7 +48,9 @@ func (s *Server) SavePURL(ctx *gin.Context) {
 func (s *Server) CreateDomain(ctx *gin.Context) {
 	domain := ctx.Param("domain")
 
-	_, err := s.admin.CreateDomain(domain)
+	user := getAuthenticatedUser(ctx)
+
+	_, err := s.admin.CreateDomain(user, domain)
 	switch true {
 	case err == nil:
 		ctx.Status(http.StatusNoContent)

diff --git a/api/server_routes.go b/api/server_routes.go
@@ -19,6 +19,8 @@ func SetupRouting(r gin.IRouter, s *Server) {
 		swaggerUI.Register(r)
 	}
 
+	isAuthenticated := authenticatedMiddleware(s.user)
+
 	webapp.Register(r)
 
 	validDomain := validPathVar("domain", regexNamed)
@@ -40,10 +42,10 @@ func SetupRouting(r gin.IRouter, s *Server) {
 		admin.Use(validDomain)
 
 		// Domain
-		admin.POST("/domains/:domain", s.CreateDomain)
+		admin.POST("/domains/:domain", isAuthenticated, s.CreateDomain)
 
 		// PURL
-		admin.PUT("/domains/:domain/purls/:name", validName, s.SavePURL)
+		admin.PUT("/domains/:domain/purls/:name", isAuthenticated, validName, s.SavePURL)
 	}
 
 	// System endpoints