[Dembo] Security middleware authentication auth failed case

internal/app/service/security/middleware/authentication.go

@@ -3,6 +3,7 @@ package middleware
 import (
 	"net/http"
 
+	"proctor/internal/app/service/infra/logger"
 	"proctor/internal/app/service/security/service"
 	"proctor/internal/pkg/constant"
 )
@@ -19,6 +20,12 @@ func (middleware *authenticationMiddleware) MiddlewareFunc(next http.Handler) ht
 			w.WriteHeader(http.StatusUnauthorized)
 			return
 		}
+		userDetail, err := middleware.service.Auth(userEmail, token)
+		logger.LogErrors(err, "authentication user", userEmail)
+		if userDetail == nil {
+			w.WriteHeader(http.StatusUnauthorized)
+			return
+		}
 		next.ServeHTTP(w, r)
 	})
 }

internal/app/service/security/middleware/authentication_test.go

@@ -1,8 +1,10 @@
 package middleware
 
 import (
+	"github.com/pkg/errors"
 	"net/http"
 	"net/http/httptest"
+	"proctor/pkg/auth"
 	"testing"
 
 	"github.com/stretchr/testify/assert"
@@ -19,7 +21,7 @@ type context interface {
 
 type testContext struct {
 	authenticationMiddleware authenticationMiddleware
-	securityService          service.SecurityService
+	securityService          *service.SecurityServiceMock
 	testHandler              http.HandlerFunc
 }
 
@@ -48,6 +50,17 @@ func TestAuthenticationMiddleware_MiddlewareFuncSuccess(t *testing.T) {
 	ctx.setUp(t)
 	defer ctx.tearDown()
 
+	userDetail := &auth.UserDetail{
+		Name: "William Dembo",
+		Email: "email@gmail.com",
+		Active:true,
+		Groups: []string{"system", "proctor_maintainer"},
+	}
+	securityService := ctx.instance().securityService
+	securityService.
+		On("Auth", "email@gmail.com", "a-token").
+		Return(userDetail, nil)
+
 	authenticationMiddleware := ctx.instance().authenticationMiddleware
 	testHandler := ctx.instance().testHandler
 	ts := httptest.NewServer(authenticationMiddleware.MiddlewareFunc(testHandler))
@@ -106,3 +119,31 @@ func TestAuthenticationMiddleware_MiddlewareFuncWithoutEmail(t *testing.T) {
 
 	assert.Equal(t, http.StatusUnauthorized, resp.StatusCode)
 }
+
+func TestAuthenticationMiddleware_MiddlewareFuncAuthFailed(t *testing.T) {
+	ctx := newContext()
+	ctx.setUp(t)
+	defer ctx.tearDown()
+
+	var userDetail *auth.UserDetail
+	securityService := ctx.instance().securityService
+	securityService.
+		On("Auth", "email@gmail.com", "a-token").
+		Return(userDetail, errors.New("authentication failed, please check your access token"))
+
+	authenticationMiddleware := ctx.instance().authenticationMiddleware
+	testHandler := ctx.instance().testHandler
+	ts := httptest.NewServer(authenticationMiddleware.MiddlewareFunc(testHandler))
+	defer ts.Close()
+
+	client := &http.Client{}
+
+	req, _ := http.NewRequest("GET", ts.URL, nil)
+	req.Header.Add(constant.AccessTokenHeaderKey, "a-token")
+	req.Header.Add(constant.UserEmailHeaderKey, "email@gmail.com")
+
+	resp, _ := client.Do(req)
+	defer resp.Body.Close()
+
+	assert.Equal(t, http.StatusUnauthorized, resp.StatusCode)
+}