Method getUserID

cmd/server/main.go:252–280

NOTE: This will only work in handlers that use the toHandleFunc wrapper.

(ctx context.Context)

// NOTE: This will only work in handlers that use the toHandleFunc wrapper.
func (s *server) getUserID(ctx context.Context) (UserID, error) {
	authHdr, ok := ctx.Value(authContextKey{}).(string)
	if !ok {
		return "", errors.New("no auth in context, is middleware active on this handler?")
	}
	if authHdr == "" {
		return "", errors.New("no 'Authorization' header in request")
	}
	if !strings.HasPrefix(strings.ToLower(authHdr), "bearer ") {
		return "", errors.New("malformed 'Authorization' header had no 'Bearer ' prefix")
	}

	// NOTE: We use ParseUnverified here because it's easier and on a self-hosted,
	// single person system, we don't really care if it's signed correctly or not.
	// That said, one could totally get the public keys from AWS Cognito to actually
	// verify the JWT.
	claims := jwt.MapClaims{}
	_, _, err := s.jwt.ParseUnverified(authHdr[7:], claims)
	if err != nil {
		return "", fmt.Errorf("failed to parse JWT: %w", err)
	}

	sub, err := claims.GetSubject()
	if err != nil {
		return "", fmt.Errorf("failed to get 'sub' claim from JWT: %w", err)
	}

	return UserID(sub), nil
}

func proxyWS(w http.ResponseWriter, r *http.Request) {
	ctx := r.Context()