import {
    Context,
    NextFunction,
    RetHandler,
} from "https://cdn.jsdelivr.net/gh/masx200/deno-http-middleware@3.3.0/mod.ts";
import { dns_records_path_name } from "./dns_records_path_name.tsx";
/**
 * 使用 DNS 记录进行身份验证的中间件函数
 * @param context 请求上下文
 * @param next 下一个中间件函数
 * @returns Promise<RetHandler> 返回处理结果
 */
export async function dns_records_authentication(
    context: Context,
    next: NextFunction,
): Promise<RetHandler> {
    const token = Deno.env.get("token");

    if (
        new URL(context.request.url).pathname === dns_records_path_name()
    ) {
        if (
            ("Bearer " + token) !== context.request.headers.get("Authorization")
        ) {
            return {
                status: 401,
                body: "unauthorized",
                headers: {
                    "WWW-Authenticate": 'Bearer realm="example"',
                },
            };
        }
        return await next();
    }

    return await next();
}