Feat(BE-69,70,71,72,73): crud and integration sso with lti, revoke_token

internal/middleware/auth.go

@@ -4,8 +4,10 @@ import (
 	"strings"
 
 	"gitlab.com/mbugroup/lti-api.git/internal/config"
+	"gitlab.com/mbugroup/lti-api.git/internal/modules/sso/session"
 	service "gitlab.com/mbugroup/lti-api.git/internal/modules/users/services"
 	"gitlab.com/mbugroup/lti-api.git/internal/sso"
+	"gitlab.com/mbugroup/lti-api.git/internal/utils"
 
 	"github.com/gofiber/fiber/v2"
 )
@@ -52,6 +54,19 @@ func Auth(userService service.UserService, requiredRights ...string) fiber.Handl
 			}
 		}
 
+		if revoker := session.GetRevocationStore(); revoker != nil {
+			if fingerprint := session.TokenFingerprint(token); fingerprint != "" {
+				revoked, err := revoker.IsRevoked(c.Context(), fingerprint)
+				if err != nil {
+					utils.Log.WithError(err).Warn("failed to check token revocation")
+					return fiber.NewError(fiber.StatusUnauthorized, "Please authenticate")
+				}
+				if revoked {
+					return fiber.NewError(fiber.StatusUnauthorized, "Please authenticate")
+				}
+			}
+		}
+
 		user, err := userService.GetBySSOUserID(c, verification.UserID)
 		if err != nil || user == nil {
 			return fiber.NewError(fiber.StatusUnauthorized, "Please authenticate")

internal/middleware/trim/json_body.go

@@ -16,6 +16,10 @@ func JSONBody() fiber.Handler {
 			return c.Next()
 		}
 
+		if strings.EqualFold(c.Path(), "/api/sso/users/sync") {
+			return c.Next()
+		}
+
 		body := c.Body()
 		if len(body) == 0 {
 			return c.Next()