Left some TODO's. Next thing is to check if the token is valid

src/controller/loginController.hpp

@@ -29,15 +29,16 @@ public:
     {
         OATPP_LOGI("icarus", "logging in");
 
-        std::cout << "user: " << usr->username->c_str() << std::endl;
-
         token_manager tok;
         auto token = tok.retrieve_token(exe_path);
 
         auto logRes = loginResultDto::createShared();
-        logRes->access_token = token.access_token.c_str();
+        logRes->id = 0; // TODO: change this later on to something meaningful
+        logRes->username = usr->username->c_str();
+        logRes->token = token.access_token.c_str();
         logRes->token_type = token.token_type.c_str();
         logRes->expiration = token.expiration;
+        logRes->message = "Successful";
 
         return createDtoResponse(Status::CODE_200, logRes);
     }

src/controller/songController.hpp

@@ -15,6 +15,8 @@
 
 #include "managers/song_manager.h"
 #include "models.h"
+#include "token_manager.h"
+#include "types/scopes.h"
 
 class songController : public oatpp::web::server::api::ApiController
 {
@@ -30,6 +32,20 @@ public:
     ENDPOINT("POST", "/api/v1/song/data", songUpload, 
             REQUEST(std::shared_ptr<IncomingRequest>, request))
     {
+        auto authHeader = request->getHeader("Authorization");
+
+        OATPP_ASSERT_HTTP(authHeader, Status::CODE_403, "Nope");
+
+        auto auth = authHeader->std_str();
+        
+        std::cout << "auth " << auth << std::endl;
+       
+        token_manager tok;
+        if (!tok.is_token_valid(auth, Scope::upload)) {
+            // TODO: prevent user from moving forward
+            // token did not have the specified scope (permission)
+        }
+
         auto mp = std::make_shared<oatpp::web::mime::multipart::Multipart>(request->getHeaders());
 
         oatpp::web::mime::multipart::Reader mp_reader(mp.get());
@@ -43,35 +59,16 @@ public:
         OATPP_ASSERT_HTTP(file, Status::CODE_400, "file is null");
 
         auto stream = file->getInputStream();
-        //char *buff = new char[file->getKnownSize()];
         auto buff = std::unique_ptr<char>(new char[file->getKnownSize()]);
-        //std::vector<unsigned char> buff; 
-        //buff.reserve(file->getKnownSize());
-        //std::string buff;
-        //std::vector<unsigned char> buff;
-        auto buffSize = stream->read(buff.get(), file->getKnownSize()-1);
-        //auto buffSize = stream->read(&buff[0], file->getKnownSize()-1);
-        std::cout << "buff size " << buffSize << std::endl;
-        /**
-        std::cout << "buff " << buff << std::endl;
-        //std::cout << stream.get() << std::endl;
-        */
+        auto buffSize = stream->read(buff.get(), file->getKnownSize());
+
         std::vector<unsigned char> data(buff.get(), buff.get() + buffSize);
-        std::cout << "size of data " << data.size() << std::endl;
 
         Song sng;
         sng.data = std::move(data);
-        //sng.data = std::move(buff);
-        //std::cout << "data buff " << sng.data << std::endl;
-        std::cout << "data size " << sng.data.size() << std::endl;
+        
         song_manager s_mgr(exe_path);
         s_mgr.saveSong(sng);
-        /* */
-
-        //std::string fileStr = file->getInMemoryData()->c_str();
-        //std::cout << fileStr << std::endl;
-        //std::cout << "known size " << file->getKnownSize() << std::endl;
-        //std::cout << "size " << fileStr.size() << std::endl;
 
         return createResponse(Status::CODE_200, "OK");
     }

src/dto/loginResultDto.hpp

@@ -10,9 +10,12 @@ class loginResultDto : public oatpp::data::mapping::type::Object
 {
     DTO_INIT(loginResultDto, Object)
 
-    DTO_FIELD(String, access_token);
+    DTO_FIELD(Int32, id);
+    DTO_FIELD(String, username);
+    DTO_FIELD(String, token);
     DTO_FIELD(String, token_type);
     DTO_FIELD(Int32, expiration);
+    DTO_FIELD(String, message);
 };
 
 class userDto : public oatpp::data::mapping::type::Object

src/token_manager.cpp

@@ -55,6 +55,18 @@ loginResult token_manager::retrieve_token(std::string_view path)
     return lr;
 }
 
+bool token_manager::is_token_valid(std::string& auth, Scope scope)
+{
+    switch (scope) {
+        case Scope::upload:
+            break;
+        default:
+            break;
+    }
+
+    return true;
+}
+
 auth_credentials token_manager::parse_auth_credentials(std::string_view path)
 {
     auto exe_path = fs::canonical(path).parent_path().string();