From 4da55d6434f6077f35466c9c0dfe3c29ee33f984 Mon Sep 17 00:00:00 2001
From: adambrangenberg <adabran06@gmail.com>
Date: Wed, 24 Dec 2025 07:18:04 +0100
Subject: Protecting CapabilitiesEndpoint via Auth

---
 src/Lib.hs | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

(limited to 'src/Lib.hs')

diff --git a/src/Lib.hs b/src/Lib.hs
index d430d9c..a0900ad 100644
--- a/src/Lib.hs
+++ b/src/Lib.hs
@@ -3,6 +3,7 @@
 {-# LANGUAGE TypeOperators   #-}
 {-# LANGUAGE OverloadedLabels #-}
 {-# LANGUAGE DuplicateRecordFields #-}
+{-# LANGUAGE OverloadedStrings #-}
 
 module Lib
     ( startApp
@@ -11,24 +12,26 @@ module Lib
     , type (:<|>)
     ) where
 
--- Servant
 import Network.Wai
 import Network.Wai.Handler.Warp
 import Network.Wai.Middleware.RequestLogger (logStdoutDev)
 import Servant
+import Servant.Server.Experimental.Auth (AuthHandler)
 
--- Utils
+import Auth (authHandler)
 import Cors
-
--- Endpoints
 import Endpoints.APILib
 import Endpoints.ServerLib
+import Data.User (User (..))
 
 startApp :: IO ()
 startApp = run 8080 (logStdoutDev app)
 
 app :: Application
-app = corsMiddleware $ serve api server
+app = corsMiddleware $ serveWithContext api authContext server
+
+authContext :: Context '[AuthHandler Request User]
+authContext = authHandler :. EmptyContext
 
 api :: Proxy API
 api = Proxy
-- 
cgit v1.2.3