middleware

func AuthN ¶

func AuthN(verifier TokenVerifier) func(http.HandlerFunc) http.HandlerFunc

AuthN returns an HTTP middleware that verifies a locally issued JWT, extracts the embedded session and user claims, and rejects revoked or expired sessions or users. If any check fails, a 401 Unauthorized response is returned with a WWW-Authenticate header containing the error details.

func ClaimsFromContext ¶

func ClaimsFromContext(ctx context.Context) map[string]any

ClaimsFromContext returns JWT claims stored by the auth middleware.

func NewBearerAuth ¶

func NewBearerAuth(verifier TokenVerifier) *bearerAuth

func NewMiddleware ¶

func NewMiddleware(verifier TokenVerifier) func(http.HandlerFunc) http.HandlerFunc

NewMiddleware is kept as a compatibility wrapper for existing callers.

func SessionFromContext ¶

func SessionFromContext(ctx context.Context) *schema.Session

SessionFromContext returns the authenticated session stored by the auth middleware.

func UserFromContext ¶

func UserFromContext(ctx context.Context) *schema.User

UserFromContext returns the authenticated user stored by the auth middleware.