Method AuthenticateToken

backend/api/auth/auth.go:321–333

AuthenticateToken validates a JWT access token and returns the user and token expiry. This is a non-ConnectRPC version that returns regular errors instead of ConnectRPC errors.

(ctx context.Context, accessTokenStr string)

// AuthenticateToken validates a JWT access token and returns the user and token expiry.
// This is a non-ConnectRPC version that returns regular errors instead of ConnectRPC errors.
func (in *APIAuthInterceptor) AuthenticateToken(ctx context.Context, accessTokenStr string) (*store.UserMessage, string, time.Time, error) {
	user, claims, err := in.authenticate(ctx, accessTokenStr)
	if err != nil {
		return nil, "", time.Time{}, err
	}

	var tokenExpiry time.Time
	if claims.ExpiresAt != nil {
		tokenExpiry = claims.ExpiresAt.Time
	}

	return user, claims.WorkspaceID, tokenExpiry, nil
}

// GetTokenFromHeaders extracts the access token from HTTP headers for ConnectRPC.
func GetTokenFromHeaders(headers http.Header) (string, error) {