HTTP middleware

middleware.go

import "github.com/julienschmidt/httprouter"

// usage
// router.POST("/path", BasicAuth(someRequestHandler))

// BasicAuth middleware for incoming requests that must include basic authentication
func BasicAuth(handler httprouter.Handle) httprouter.Handle {
	return func(w http.ResponseWriter, r *http.Request, p httprouter.Params) {
		log.Printf("Authorizing request from %s", r.RemoteAddr)

		username, password, hasAuth := r.BasicAuth()
		if hasAuth == false {
			w.Header().Set("WWW-Authenticate", "Basic realm=Restricted")
			log.Printf("Request from %s not authorized, missing basic authentication credentials", r.RemoteAddr)
			http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
			return
		}

		// check the credentials against the database ...
		validCredentials := model.validCredentials(username, password)
    
		if !validCredentials {
			w.Header().Set("WWW-Authenticate", "Basic realm=Restricted")
			log.Printf("Request from %s not authorized, invalid basic authentication credentials", r.RemoteAddr)
			http.Error(w, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
			return
		}

		log.Printf("Authorized request from %s", r.RemoteAddr)

		handler(w, r, p)
	}
}