Protecting CapabilitiesEndpoint via Auth

1 files changed, 8 insertions, 5 deletions

diff --git a/src/Lib.hs b/src/Lib.hs
index d430d9c..a0900ad 100644
--- a/src/Lib.hs
+++ b/src/Lib.hs
@@ -3,6 +3,7 @@
 {-# LANGUAGE TypeOperators   #-}
 {-# LANGUAGE OverloadedLabels #-}
 {-# LANGUAGE DuplicateRecordFields #-}
+{-# LANGUAGE OverloadedStrings #-}
 
 module Lib
     ( startApp
@@ -11,24 +12,26 @@ module Lib
     , type (:<|>)
     ) where
 
--- Servant
 import Network.Wai
 import Network.Wai.Handler.Warp
 import Network.Wai.Middleware.RequestLogger (logStdoutDev)
 import Servant
+import Servant.Server.Experimental.Auth (AuthHandler)
 
--- Utils
+import Auth (authHandler)
 import Cors
-
--- Endpoints
 import Endpoints.APILib
 import Endpoints.ServerLib
+import Data.User (User (..))
 
 startApp :: IO ()
 startApp = run 8080 (logStdoutDev app)
 
 app :: Application
-app = corsMiddleware $ serve api server
+app = corsMiddleware $ serveWithContext api authContext server
+
+authContext :: Context '[AuthHandler Request User]
+authContext = authHandler :. EmptyContext
 
 api :: Proxy API
 api = Proxy