package middleware import ( "net/http" "mengstack/internal/kernel/response" "mengstack/internal/kernel/errors" "mengstack/internal/kernel/tenant" "github.com/gin-gonic/gin" ) func MultiTenant() gin.HandlerFunc { return func(c *gin.Context) { tenantID := c.GetHeader("X-Tenant-ID") if tenantID == "" { tenantID = c.Query("tenant_id") } if tenantID == "" { response.Fail(c, errors.ErrTenantRequired) c.Abort() return } c.Set("tenant_id", tenantID) ctx := tenant.WithTenantID(c.Request.Context(), tenantID) c.Request = c.Request.WithContext(ctx) c.Next() } } func OptionalTenant() gin.HandlerFunc { return func(c *gin.Context) { tenantID := c.GetHeader("X-Tenant-ID") if tenantID == "" { tenantID = c.Query("tenant_id") } if tenantID != "" { c.Set("tenant_id", tenantID) ctx := tenant.WithTenantID(c.Request.Context(), tenantID) c.Request = c.Request.WithContext(ctx) } c.Next() } } func CORS() gin.HandlerFunc { return func(c *gin.Context) { c.Header("Access-Control-Allow-Origin", "*") c.Header("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS") c.Header("Access-Control-Allow-Headers", "Origin, Content-Type, Accept, Authorization, X-Tenant-ID, X-Request-ID") c.Header("Access-Control-Expose-Headers", "X-Request-ID") c.Header("Access-Control-Max-Age", "86400") if c.Request.Method == http.MethodOptions { c.AbortWithStatus(http.StatusNoContent) return } c.Next() } }