auth: Replaced old system with api key-based system.

graphql/resolver/queries/files.go

@@ -4,7 +4,7 @@ import (
 	"context"
 
 	"git.aiterp.net/rpdata/api/graphql/resolver/types"
-	"git.aiterp.net/rpdata/api/internal/session"
+	"git.aiterp.net/rpdata/api/internal/auth"
 	"git.aiterp.net/rpdata/api/model/file"
 )
 
@@ -19,11 +19,11 @@ type FilesArgs struct {
 // Files resolves the file query
 func (r *QueryResolver) Files(ctx context.Context, args *FilesArgs) ([]*types.FileResolver, error) {
 	filter := args.Filter
-	user := session.FromContext(ctx).User()
+	token := auth.TokenFromContext(ctx)
 
 	author := ""
-	if user != nil {
-		author = user.ID
+	if token != nil {
+		author = token.UserID
 	}
 
 	mimeTypes := []string(nil)

graphql/resolver/queries/stories.go

@@ -5,7 +5,7 @@ import (
 	"time"
 
 	"git.aiterp.net/rpdata/api/graphql/resolver/types"
-	"git.aiterp.net/rpdata/api/internal/session"
+	"git.aiterp.net/rpdata/api/internal/auth"
 	"git.aiterp.net/rpdata/api/model/story"
 )
 
@@ -30,6 +30,8 @@ type StoriesArg struct {
 func (r *QueryResolver) Stories(ctx context.Context, args *StoriesArg) ([]*types.StoryResolver, error) {
 	var err error
 
+	token := auth.TokenFromContext(ctx)
+
 	filter := args.Filter
 
 	author := ""
@@ -79,16 +81,15 @@ func (r *QueryResolver) Stories(ctx context.Context, args *StoriesArg) ([]*types
 
 		unlisted = filter.Unlisted != nil && *filter.Unlisted == true
 		if unlisted {
-			user := session.FromContext(ctx).User()
-			if user == nil {
+			if token == nil {
 				return nil, ErrUnauthorized
 			}
 
-			if author != "" && author != user.ID && !user.Permitted("story.unlisted") {
+			if author != "" && author != token.UserID && !token.Permitted("story.unlisted") {
 				return nil, ErrPermissionDenied
 			}
 
-			author = user.ID
+			author = token.UserID
 		}
 
 		open = filter.Open