AcaMate_API/Program/Common/Auth/APIHeaderMiddleware.cs

using Back.Program.Common.Auth.Interface;
using Back.Program.Common.Data;
using Microsoft.EntityFrameworkCore;

namespace Back.Program.Common.Auth
{
    ///
    public class APIHeaderMiddleware
    {
    
        private readonly RequestDelegate _next;
        private readonly string[] _headerNames;
        // private readonly IHeaderConfig _headerConfig;

        public APIHeaderMiddleware(RequestDelegate next, string[] headerNames)//, IHeaderConfig headerConfig)
        {
            _next = next;
            _headerNames = headerNames;
        }

        public async Task Invoke(HttpContext context)
        {
            if (context.Request.Path.Equals("/api/v1/in/app", StringComparison.OrdinalIgnoreCase))
            {
                await _next(context);
                return;
            }
        
            // Scoped 사용해서 값 가져오는 곳임
            var headerConfig = context.RequestServices.GetRequiredService<IHeaderConfig>();
        
            bool valid = false;

            foreach (var header in _headerNames)
            {
                /// context.Request.Headers.TryGetValue(header, out var headerValue)
                /// header 를 찾는데 header
                if (context.Request.Headers.TryGetValue(header, out var headerValue) &&
                    !string.IsNullOrWhiteSpace(headerValue))
                {
                    var keyName = await headerConfig.GetExpectedHeaderValueAsync(headerValue);
                    if (keyName != string.Empty)
                    {
                        valid = true;
                        break;
                    }
                }
            }

            if (!valid)
            {
                context.Response.StatusCode = StatusCodes.Status401Unauthorized;
                await context.Response.WriteAsync($"Invalid header value");
                return;
            }
        
            await _next(context);
        }
    }
}