[R9] Auth token filter

src/main/java/com/mirna/hospitalmanagementapi/infra/security/filters/AuthTokenFilter.java

@@ -0,0 +1,60 @@
+package com.mirna.hospitalmanagementapi.infra.security.filters;
+
+import java.io.IOException;
+
+import javax.security.sasl.AuthenticationException;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Component;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import com.mirna.hospitalmanagementapi.domain.entities.auth.User;
+import com.mirna.hospitalmanagementapi.domain.services.UserService;
+import com.mirna.hospitalmanagementapi.domain.services.auth.jwt.TokenService;
+
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+
+@Component
+public class AuthTokenFilter extends OncePerRequestFilter {
+
+	@Autowired
+	private TokenService tokenService;
+	
+	@Autowired
+	private UserService userService;
+	
+	@Override
+	protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
+			throws ServletException, IOException {
+		
+		String authorizationHeader = request.getHeader("Authorization");
+		
+		if (authorizationHeader.isBlank() || !authorizationHeader.startsWith("Bearer ")) {
+			throw new AuthenticationException("Authorization token is null or invalid");
+		}
+	    
+		String token = authorizationHeader.replace("Bearer ", "").trim();
+		
+		String tokenSubject = tokenService.getTokenSubject(token);
+		
+		User authenticatedUser = (User) userService.findUserByLogin(tokenSubject);
+		
+		Authentication auth = new UsernamePasswordAuthenticationToken(authenticatedUser, null, authenticatedUser.getAuthorities());
+		
+		SecurityContextHolder.getContext().setAuthentication(auth);
+		
+		filterChain.doFilter(request, response);
+	}
+	
+	@Override
+	protected boolean shouldNotFilter(HttpServletRequest request) throws ServletException {
+	    return request.getServletPath().startsWith("/api/auth");
+	}
+
+}