ERP/internal/middleware/auth.go
2026-02-06 17:35:29 +01:00

28 lines
691 B
Go

package middleware
import (
"net/http"
"github.com/gorilla/sessions"
)
func RequireAuth(store *sessions.CookieStore) func(http.Handler) http.Handler {
return func(next http.Handler) http.Handler {
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
session, _ := store.Get(r, "erp-session")
userID, ok := session.Values["user_id"]
if !ok || userID == nil {
// Check if this is an HTMX request
if r.Header.Get("HX-Request") == "true" {
w.Header().Set("HX-Redirect", "/login")
w.WriteHeader(http.StatusUnauthorized)
return
}
http.Redirect(w, r, "/login", http.StatusSeeOther)
return
}
next.ServeHTTP(w, r)
})
}
}