auth: Replaced old system with api key-based system.

cmd/rpdata-graphiql/main.go

@@ -9,7 +9,7 @@ import (
 	"git.aiterp.net/rpdata/api/graphql/loader"
 	"git.aiterp.net/rpdata/api/graphql/resolver"
 	"git.aiterp.net/rpdata/api/graphql/schema"
-	"git.aiterp.net/rpdata/api/internal/session"
+	"git.aiterp.net/rpdata/api/internal/auth"
 	"git.aiterp.net/rpdata/api/internal/store"
 	"git.aiterp.net/rpdata/api/model/change"
 	"git.aiterp.net/rpdata/api/model/file"
@@ -46,19 +46,19 @@ func main() {
 
 	relayHandler := &relay.Handler{Schema: schema}
 	http.HandleFunc("/graphql", func(w http.ResponseWriter, r *http.Request) {
-		r = session.Load(w, r)
-
 		l := loader.New()
 		r = r.WithContext(l.ToContext(r.Context()))
 
+		r = auth.RequestWithToken(r)
+
 		relayHandler.ServeHTTP(w, r)
 	})
 
 	http.HandleFunc("/upload", func(w http.ResponseWriter, r *http.Request) {
-		r = session.Load(w, r)
-		sess := session.FromContext(r.Context())
-		user := sess.User()
-		if user == nil || !user.Permitted("file.upload") {
+		r = auth.RequestWithToken(r)
+
+		token := auth.TokenFromContext(r.Context())
+		if !token.Permitted("file.upload") {
 			http.Error(w, "Unauthorized", http.StatusUnauthorized)
 			return
 		}
@@ -74,7 +74,7 @@ func main() {
 			return
 		}
 
-		file, err := file.Upload(r.Context(), header.Filename, header.Header.Get("Content-Type"), user.ID, header.Size, formFile)
+		file, err := file.Upload(r.Context(), header.Filename, header.Header.Get("Content-Type"), token.UserID, header.Size, formFile)
 		if err != nil {
 			http.Error(w, "Internal (2): "+err.Error(), http.StatusInternalServerError)
 			return