secret code middleware for migration

pkg/controllers/api.go

@@ -16,7 +16,7 @@ func NewApiController(as *services.ApiService, s *gin.RouterGroup) *ApiControlle
 	ac.ApiService = as
 
 	s.GET("", ac.getFirst)
-	s.POST("migrate", middleware.Auth, ac.postMigrate)
+	s.POST("migrate", middleware.SecretCode, ac.postMigrate)
 
 	return ac
 }

pkg/middleware/secretCode.go

@@ -0,0 +1,30 @@
+package middleware
+
+import (
+	"os"
+	"wallet-api/pkg/models"
+	"wallet-api/pkg/utl/configs"
+
+	"github.com/gin-gonic/gin"
+)
+
+func SecretCode(c *gin.Context) {
+	exceptionReturn := new(models.Exception)
+	secretCode := ExtractCode(c)
+	secret := os.Getenv("SECRET_CODE")
+	if secret == "" {
+		secret = configs.SecretCode
+	}
+	if secret != secretCode {
+		exceptionReturn.ErrorCode = "401101"
+		exceptionReturn.StatusCode = 401
+		exceptionReturn.Message = "Invalid secret code"
+		c.AbortWithStatusJSON(exceptionReturn.StatusCode, exceptionReturn)
+	}
+	c.Next()
+}
+
+func ExtractCode(c *gin.Context) string {
+	secret := c.GetHeader("SECRET_CODE")
+	return secret
+}

pkg/utl/configs/configs.go

@@ -1,7 +1,8 @@
 package configs
 
 const (
-	Version = "0.0.1"
+	Version    = "0.0.1"
-	Prefix  = "v1"
+	Prefix     = "v1"
-	Secret  = "Donde4sta"
+	Secret     = "Donde4sta"
+	SecretCode = "brasno"
 )