From 4eee8a4245cae08c197c0c0a02e349c6f316c5bb Mon Sep 17 00:00:00 2001
From: Samir Patel <48686912+54mir@users.noreply.github.com>
Date: Mon, 13 Dec 2021 23:12:04 -0600
Subject: [PATCH] change the way auth is instantiated, and send to handler

---
 server/server.go | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/server/server.go b/server/server.go
index a6d0049ae..1577e0fff 100644
--- a/server/server.go
+++ b/server/server.go
@@ -29,6 +29,7 @@ import (
 	"golang.org/x/sync/errgroup"
 
 	pilosa "github.com/molecula/featurebase/v2"
+	"github.com/molecula/featurebase/v2/auth"
 	"github.com/molecula/featurebase/v2/boltdb"
 	"github.com/molecula/featurebase/v2/encoding/proto"
 	petcd "github.com/molecula/featurebase/v2/etcd"
@@ -81,6 +82,8 @@ type Command struct {
 	pgserver     *PostgresServer
 
 	serverOptions []pilosa.ServerOption
+
+	auth *auth.Auth
 }
 
 type CommandOption func(c *Command) error
@@ -222,10 +225,6 @@ func (m *Command) Start() (err error) {
 		return errors.Wrap(err, "setting resource limits")
 	}
 
-	if m.Config.Auth.Enable {
-		m.Config.MustValidateAuth()
-	}
-
 	// Initialize server.
 	if err = m.Server.Open(); err != nil {
 		return errors.Wrap(err, "opening server")
@@ -523,6 +522,15 @@ func (m *Command) SetupServer() error {
 		return errors.Wrap(err, "new grpc server")
 	}
 
+	if m.Config.Auth.Enable {
+		m.Config.MustValidateAuth()
+		ac := m.Config.Auth
+		scopes := []string{"https://graph.microsoft.com/.default", "offline_access"}
+		m.auth, _ = auth.NewAuth(m.logger, m.listenURI.String(), scopes, ac.AuthorizeURL, ac.TokenURL, ac.GroupEndpointURL, ac.ClientId, ac.ClientSecret, ac.HashKey, ac.BlockKey)
+
+	}
+
+	m.logger.Infof("Before Handler %+v", m.auth)
 	m.Handler, err = http.NewHandler(
 		http.OptHandlerAllowedOrigins(m.Config.Handler.AllowedOrigins),
 		http.OptHandlerAPI(m.API),
@@ -531,6 +539,7 @@ func (m *Command) SetupServer() error {
 		http.OptHandlerListener(m.ln, m.Config.Advertise),
 		http.OptHandlerCloseTimeout(m.closeTimeout),
 		http.OptHandlerMiddleware(m.grpcServer.middleware(m.Config.Handler.AllowedOrigins)),
+		http.OptHandlerAuth(m.auth),
 	)
 	return errors.Wrap(err, "new handler")
 }