add full auth

internal/modules/processor_jwt/interceptor.go

@@ -0,0 +1,45 @@
+package processor_jwt
+
+import (
+	"context"
+	"strings"
+
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/metadata"
+	"google.golang.org/grpc/status"
+)
+
+func NewAuthorizationInterceptor(
+	publicMethods map[string]bool,
+	processorJWT IProcessorJWT,
+) grpc.UnaryServerInterceptor {
+	return func(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (resp any, err error) {
+		if publicMethods[info.FullMethod] {
+			return handler(ctx, req)
+		}
+
+		md, ok := metadata.FromIncomingContext(ctx)
+		if !ok {
+			return nil, status.Errorf(codes.Unauthenticated, "metadata is not provided")
+		}
+
+		values := md.Get("authorization")
+		if len(values) == 0 {
+			return nil, status.Errorf(codes.Unauthenticated, "authorization token is not provided")
+		}
+
+		token := strings.TrimPrefix(values[0], "Bearer ")
+		if token == "" {
+			return nil, status.Errorf(codes.Unauthenticated, "invalid token format")
+		}
+
+		claims, err := processorJWT.GetClaims(token)
+		if err != nil {
+			return nil, status.Errorf(codes.Unauthenticated, "invalid token")
+		}
+
+		ctx = context.WithValue(ctx, "claims", claims)
+		return handler(ctx, req)
+	}
+}