axum-cookie-auth-middleware.rs

pub async fn auth_middleware(
    State(db): State<PgPool>,
    cookies: Cookies,
    mut request: axum::extract::Request,
    next: axum::middleware::Next
) -> Result<impl IntoResponse, StatusCode> {
    if let Some(session_token) = cookies.get("session_token").map(|cookie| cookie.value().to_string()) {
        let query = "SELECT user_id FROM sessions WHERE session_token = $1 AND expiration > NOW();";
        match sqlx::query_as::<_,(Uuid,)>(query).bind(&session_token).fetch_one(&db).await {
            Ok((user_id,)) => {
                let query = "SELECT name, email FROM users WHERE user_id = $1;";
                match sqlx::query_as::<_,(String, String)>(query).bind(&user_id).fetch_one(&db).await {
                    Ok((name, email)) => {
                        request.extensions_mut().insert(CurrentUser {
                            user_id: user_id.to_string(),
                            name,
                            email
                        });
                        return Ok(next.run(request).await);
                    },
                    Err(err) => {
                        tracing::warn!("Could not find user: {err:?}");
                    }
                }
            },
            Err(err) => {
                tracing::warn!("Could not find session: {err:?}");
            }
        }
    }
    Err(StatusCode::UNAUTHORIZED)
}