diff --git a/go-crud.exe b/go-crud.exe index a3b3635..cfa8bfe 100644 Binary files a/go-crud.exe and b/go-crud.exe differ diff --git a/go-crud.exe~ b/go-crud.exe~ new file mode 100644 index 0000000..c4eadf3 Binary files /dev/null and b/go-crud.exe~ differ diff --git a/main.go b/main.go index 4f9e211..1fb5ffd 100644 --- a/main.go +++ b/main.go @@ -27,6 +27,7 @@ func main() { r.PUT("/posts/:id", controllers.PostsUpdate) r.DELETE("/posts/:id", controllers.PostDelete) + r.Use(middleware.RequireAuth) r.POST("/news", controllers.NewsCreate) r.GET("/newsData", controllers.NewsIndex) r.GET("/newsShow/:id", controllers.NewsShow) diff --git a/middleware/requireAuth.go b/middleware/requireAuth.go index ed4d1c3..cb74e64 100644 --- a/middleware/requireAuth.go +++ b/middleware/requireAuth.go @@ -2,14 +2,15 @@ package middleware import ( "fmt" - "go-crud/initializers" - "go-crud/models" "net/http" "os" "time" - "github.com/dgrijalva/jwt-go" + "go-crud/initializers" + "go-crud/models" + "github.com/gin-gonic/gin" + "github.com/golang-jwt/jwt/v4" ) func RequireAuth(c *gin.Context) { @@ -47,17 +48,17 @@ func RequireAuth(c *gin.Context) { return } - // Find the news with token sub - var news models.News - initializers.DB.First(&news, claims["sub"]) + // Find the user with token sub + var user models.User + initializers.DB.First(&user, claims["sub"]) - if news.ID == 0 { + if user.ID == 0 { c.AbortWithStatus(http.StatusUnauthorized) return } // Attach to req - c.Set("news", news) + c.Set("user", user) // Continue c.Next()