36 lines
1.3 KiB
Scala
36 lines
1.3 KiB
Scala
package controllers.authentication
|
|
|
|
import dao.AuthTokensDAO
|
|
import jakarta.inject.Inject
|
|
import models.AuthToken
|
|
import play.api.libs.json.*
|
|
import play.api.mvc.Results.Unauthorized
|
|
import play.api.mvc.{ActionRefiner, Request, Result, WrappedRequest}
|
|
|
|
import scala.concurrent.{ExecutionContext, Future}
|
|
|
|
class AuthenticatedRequest[A](val token: AuthToken, request: Request[A]) extends WrappedRequest[A](request)
|
|
|
|
class AuthenticatedAction @Inject()(authTokensDao: AuthTokensDAO)(implicit val executionContext: ExecutionContext) extends ActionRefiner[Request, AuthenticatedRequest] {
|
|
private final val tokenPrefix = "Token"
|
|
|
|
override protected def refine[A](request: Request[A]): Future[Either[Result, AuthenticatedRequest[A]]] = {
|
|
val unauthenticatedRequestError = Left(Unauthorized(Json.obj("error" -> "Unauthenticated")))
|
|
val authHeader = request.headers.get("Authorization")
|
|
.flatMap { header =>
|
|
if header.startsWith(tokenPrefix) then Some(header.substring(tokenPrefix.length).trim)
|
|
else None
|
|
}
|
|
.filter(_.nonEmpty)
|
|
|
|
authHeader match {
|
|
case Some(token) =>
|
|
authTokensDao.find(token).map {
|
|
case Some(authToken) => Right(AuthenticatedRequest[A](authToken, request))
|
|
case None => unauthenticatedRequestError
|
|
}
|
|
case None => Future.successful(unauthenticatedRequestError)
|
|
}
|
|
}
|
|
}
|