feat: frontend

api/auth/middleware/authentication_middleware.go

@@ -86,6 +86,9 @@ func HandleRefreshToken(session sessions.Session) bool {
 	}
 
 	refresh_token := session.Get("refresh_token")
+	if refresh_token == nil {
+		return false
+	}
 	refresh_request_dto := dto.RefreshTokenRequest{
 		GrantType:    "refresh_token",
 		ClientId:     os.Getenv("AUTH0_CLIENT_ID"),
@@ -139,28 +142,23 @@ func IsAuthenticated(auth *auth.Authenticator) gin.HandlerFunc {
 	return func(context *gin.Context) {
 		session := sessions.Default(context)
 
-		if session.Get("profile") == nil {
-			context.Redirect(http.StatusSeeOther, "/auth/login")
-			context.Abort()
-			return
-		}
+		refresh_token := session.Get("refresh_token")
 
 		access_token := session.Get("access_token")
 
-		if access_token == nil {
-			context.Redirect(http.StatusSeeOther, "/auth/login")
-			return
-		}
+		log.Printf("%s", refresh_token)
 
-		if TokenIsNotExpired(access_token.(string)) {
-			context.Next()
-		} else {
-			if !HandleRefreshToken(session) {
-				context.Redirect(http.StatusSeeOther, "/auth/login")
-				return
-			} else {
+		if access_token != nil {
+			if TokenIsNotExpired(access_token.(string)) {
 				context.Next()
+				return
 			}
 		}
+
+		if !HandleRefreshToken(session) {
+			context.AbortWithStatus(http.StatusUnauthorized)
+			return
+		}
+		context.Next()
 	}
 }