middleware.go

package main

import (
	"os"

	gin "github.com/gin-gonic/gin"
)

var ADMIN_PASSWORD string

func init() {
	ADMIN_PASSWORD = os.Getenv("ADMIN_PASSWORD")
	if ADMIN_PASSWORD == "" {
		ADMIN_PASSWORD = "TotallySecurePassword"
	}
}

func adminCheck(c *gin.Context) {
	password := c.Request.Header.Get("Authorization")
	if password != ADMIN_PASSWORD {
		c.String(401, "Unauthorized")
		c.Abort()
		return
	}
	c.Next()
}

func cors(c *gin.Context) {
	c.Header("Access-Control-Allow-Origin", "*")
	c.Header("Access-Control-Allow-Methods", "*")
	c.Header("Access-Control-Allow-Headers", "*")
	c.Next()
}

func Authorization(c *gin.Context) {
	api_password := os.Getenv("API_PASSWORD")
	if api_password != "" && c.Request.Header.Get("Authorization") != api_password {
		c.String(401, "Unauthorized")
		c.Abort()
		return
	}
	c.Next()
}