Class: AgentAdmit::Middleware

Inherits:
Object
  • Object
show all
Defined in:
lib/agentadmit/middleware.rb

Overview

Rack middleware that intercepts requests with ag_at_ tokens and validates them via introspection.

Sets env variables for downstream use:

env['agentadmit.auth_type']     — "agent" or nil
env['agentadmit.user_id']       — validated user ID
env['agentadmit.scopes']        — granted scopes array
env['agentadmit.connection_id'] — connection identifier
env['agentadmit.agent_label']   — agent display name

Instance Method Summary collapse

Constructor Details

#initialize(app) ⇒ Middleware

Returns a new instance of Middleware.



16
17
18
19
20
 
# File 'lib/agentadmit/middleware.rb', line 16

def initialize(app)
  @app = app
  @client = IntrospectionClient.new
  @config = AgentAdmit.configuration || Config.new
end

Instance Method Details

#call(env) ⇒ Object 



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
 
# File 'lib/agentadmit/middleware.rb', line 22

def call(env)
  auth = env["HTTP_AUTHORIZATION"] || ""

  if auth.start_with?("Bearer #{@config.token_prefix_access}")
    token = auth.sub("Bearer ", "")

    begin
      result = @client.verify(token)
      env["agentadmit.auth_type"] = "agent"
      env["agentadmit.user_id"] = result.user_id
      env["agentadmit.scopes"] = result.scopes
      env["agentadmit.connection_id"] = result.connection_id
      env["agentadmit.agent_label"] = result.agent_label
    rescue InvalidTokenError => e
      return [401, { "Content-Type" => "application/json" },
        [{ error: "invalid_token", error_description: e.message }.to_json]]
    rescue IntrospectionError => e
      return [502, { "Content-Type" => "application/json" },
        [{ error: "introspection_failed", error_description: e.message }.to_json]]
    end
  end

  @app.call(env)
end