Trust center access management - get rid of access token

Signed-off-by: Émile Ré <emile@getprobo.com>

pkg/server/api/compliancepage/id_middleware.go

@@ -16,10 +16,15 @@ package compliancepage
 
 import (
 	"context"
+	"errors"
 	"net/http"
 
+	"github.com/99designs/gqlgen/graphql"
 	"github.com/go-chi/chi/v5"
+	"github.com/vektah/gqlparser/v2/gqlerror"
+	"go.gearno.de/kit/httpserver"
 	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/server/gqlutils"
 	"go.probo.inc/probo/pkg/trust"
 )
 
@@ -33,7 +38,25 @@ func NewIDMiddleware(trustSvc *trust.Service) func(next http.Handler) http.Handl
 
 				if id, err := gid.ParseGID(value); err == nil {
 					compliancePage, err := trustSvc.Get(ctx, id)
-					if err != nil || !compliancePage.Active {
+					if err != nil {
+						if errors.Is(err, trust.ErrPageNotFound) {
+							next.ServeHTTP(w, r)
+							return
+						}
+
+						httpserver.RenderJSON(
+							w,
+							http.StatusInternalServerError,
+							&graphql.Response{
+								Errors: gqlerror.List{
+									gqlutils.Internal(ctx),
+								},
+							},
+						)
+						return
+					}
+
+					if !compliancePage.Active {
 						next.ServeHTTP(w, r)
 						return
 					}
@@ -43,7 +66,26 @@ func NewIDMiddleware(trustSvc *trust.Service) func(next http.Handler) http.Handl
 					return
 				}
 
-				if compliancePage, err := trustSvc.GetBySlug(ctx, value); err == nil && compliancePage.Active {
+				compliancePage, err := trustSvc.GetBySlug(ctx, value)
+				if err != nil {
+					if errors.Is(err, trust.ErrPageNotFound) {
+						next.ServeHTTP(w, r)
+						return
+					}
+
+					httpserver.RenderJSON(
+						w,
+						http.StatusInternalServerError,
+						&graphql.Response{
+							Errors: gqlerror.List{
+								gqlutils.Internal(ctx),
+							},
+						},
+					)
+					return
+				}
+
+				if compliancePage.Active {
 					ctx = context.WithValue(ctx, compliancePageKey, compliancePage)
 					next.ServeHTTP(w, r.WithContext(ctx))
 					return