package server import ( "context" "errors" "git.xeserv.us/xena/route/internal/database" "github.com/Xe/ln" "google.golang.org/grpc" "google.golang.org/grpc/codes" "google.golang.org/grpc/metadata" ) // errors var ( ErrNotAuthorized = errors.New("server: not authorized") ) func (s *Server) getAuth(ctx context.Context, scope string) (database.Token, error) { var err error md, ok := metadata.FromIncomingContext(ctx) if !ok { return database.Token{}, grpc.Errorf(codes.Unauthenticated, "valid token required.") } jwtToken, ok := md["authorization"] if !ok { return database.Token{}, grpc.Errorf(codes.Unauthenticated, "valid token required.") } val := jwtToken[0] t, err := s.db.GetToken(ctx, val) if err != nil { return database.Token{}, grpc.Errorf(codes.Unauthenticated, "valid token required.") } ok = false for _, sc := range t.Scopes { if sc == scope { ok = true } } if !ok { return database.Token{}, grpc.Errorf(codes.Unauthenticated, "invalid scope.") } return t, nil } func handleError(ctx context.Context, clitok database.Token, err error, f ln.F) error { ln.Error(ctx, err, f, clitok) return err }