Files
DurpAPI/controller/controller.go
2023-06-23 12:21:35 -04:00

86 lines
1.8 KiB
Go

package controller
import (
"log"
"net/http"
"strings"
"github.com/caarlos0/env/v6"
"github.com/gin-gonic/gin"
"github.com/joho/godotenv"
"github.com/sashabaranov/go-openai"
"gitlab.com/DeveloperDurp/DurpAPI/model"
)
type Controller struct {
Cfg model.Config
dbcfg model.DBConfig
}
func NewController() *Controller {
err := godotenv.Load(".env")
if err != nil {
log.Fatalf("unable to load file: %e", err)
}
controller := &Controller{}
controller.Cfg = model.Config{}
controller.dbcfg = model.DBConfig{}
err = env.Parse(&controller.Cfg)
if err != nil {
log.Fatalf("unable to parse environment variables: %e", err)
}
err = env.Parse(&controller.dbcfg)
if err != nil {
log.Fatalf("unable to parse database variables: %e", err)
}
controller.Cfg.OpenaiClient = *openai.NewClient(controller.Cfg.OpenaiApiKey)
return controller
}
func (c *Controller) AuthMiddleware(
allowedGroups []string,
currentGroups string,
) gin.HandlerFunc {
return func(c *gin.Context) {
var groups []string
if currentGroups != "" {
groups = strings.Split(currentGroups, ",")
} else {
// Get the user groups from the request headers
groupsHeader := c.GetHeader("X-authentik-groups")
// Split the groups header value into individual groups
groups = strings.Split(groupsHeader, "|")
}
// Check if the user belongs to any of the allowed groups
isAllowed := false
for _, allowedGroup := range allowedGroups {
for _, group := range groups {
if group == allowedGroup {
isAllowed = true
break
}
}
if isAllowed {
break
}
}
// If the user is not in any of the allowed groups, respond with unauthorized access
if !isAllowed {
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
"message": "Unauthorized access",
"groups": groups,
})
return
}
// Call the next handler
c.Next()
}
}