middleware.go

package auth

import (
	"fmt"
	"os"
	"personal-erp-backend/database"
	"personal-erp-backend/internal/profile"
	"time"

	"github.com/gin-gonic/gin"
	"github.com/golang-jwt/jwt/v5"
)

func RequireAuth(c *gin.Context) {
	authMode := os.Getenv("AUTH_MODE")
	if authMode == "false" {
		c.Set("userID", 1)
		c.Next()
		return
	}
	var tokenString string
	tokenString, err := c.Cookie("authorization")
	if tokenString == "" {
		authHeader := c.GetHeader("Authorization")
		if authHeader == "" {
			c.JSON(401, gin.H{"unauthorize": err.Error()})
			return
		}
		tokenString = authHeader
	}
	token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
		if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
			return nil, fmt.Errorf("method unknown")
		}
		return SecretKey, nil
	})
	if err != nil || !token.Valid {
		c.JSON(401, gin.H{"unauthorize": "token invalid"})
		return
	}

	if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
		if float64(time.Now().Unix()) > claims["exp"].(float64) {
			c.JSON(401, gin.H{"message": "Token expired"})
		}
		var user profile.User
		if result := database.DB.First(&user, claims["sub"]); result.Error != nil {
			c.AbortWithStatusJSON(401, gin.H{"error": "User no"})
			return
		}
		c.Set("userID", user.ID)
		c.Next()
	} else {
		c.JSON(401, gin.H{"message": "Invalid token"})
		return
	}
}