chore(api): move token auth to rust api service

services/api/src/main.rs

@@ -135,6 +135,7 @@ async fn main() -> anyhow::Result<()> {
 
         .layer(axum::middleware::from_fn(middleware::logger))
         .layer(middleware::ratelimit::ratelimiter(middleware::ratelimit::do_request_ratelimited)) // this sucks
+        .layer(axum::middleware::from_fn_with_state(ctx.clone(), middleware::authnz))
         .layer(axum::middleware::from_fn(middleware::ignore_invalid_routes))
         .layer(axum::middleware::from_fn(middleware::cors))
 

services/api/src/middleware/authnz.rs

@@ -0,0 +1,35 @@
+use axum::{
+    extract::{Request, State},
+    http::HeaderValue,
+    middleware::Next,
+    response::Response,
+};
+use tracing::error;
+
+use crate::ApiContext;
+
+pub async fn authnz(State(ctx): State<ApiContext>, mut request: Request, next: Next) -> Response {
+    let headers = request.headers_mut();
+    headers.remove("x-pluralkit-systemid");
+    let auth_header = headers
+        .get("authorization")
+        .map(|h| h.to_str().ok())
+        .flatten();
+    if let Some(auth_header) = auth_header {
+        if let Some(system_id) =
+            match libpk::db::repository::legacy_token_auth(&ctx.db, auth_header).await {
+                Ok(val) => val,
+                Err(err) => {
+                    error!(?err, "failed to query authorization token in postgres");
+                    None
+                }
+            }
+        {
+            headers.append(
+                "x-pluralkit-systemid",
+                HeaderValue::from_str(format!("{system_id}").as_str()).unwrap(),
+            );
+        }
+    }
+    next.run(request).await
+}

services/api/src/middleware/mod.rs

@@ -1,5 +1,4 @@
 mod cors;
-
 pub use cors::cors;
 
 mod logger;
@@ -9,3 +8,6 @@ mod ignore_invalid_routes;
 pub use ignore_invalid_routes::ignore_invalid_routes;
 
 pub mod ratelimit;
+
+mod authnz;
+pub use authnz::authnz;