add: caddy jwt logic

backend/src/main.py

@@ -16,7 +16,7 @@ from .database import SessionLocal, engine
 # Security
 
 # take it from env
-SECRET_KEY = b64decode("iYg7wB+sPihtjz50iJTsD0XmOeUwKy2TJtfNLcqFRM8=").hex()
+SECRET_KEY = b64decode("iYg7wB+sPihtjz50iJTsD0XmOeUwKy2TJtfNLcqFRM8=")
 ALGORITHM = "HS256"
 ACCESS_TOKEN_EXPIRE_MINUTES = 3600
 

caddy/Caddyfile

@@ -1,3 +1,7 @@
+{
+	order jwtauth before basicauth
+}
+
 :80 {
 	encode zstd gzip
 
@@ -8,16 +12,23 @@
 
 	redir /openapi.json /api/v1/openapi.json permanent
 
-
 	handle_path /martin/* {
 		rewrite * {path}
 		reverse_proxy martin:3000
 	}
 
+	@is_admin {
+		vars {http.auth.user.id} "demo"
+	}
 
 	handle_path /pgweb/* {
+		jwtauth {
+			sign_key iYg7wB+sPihtjz50iJTsD0XmOeUwKy2TJtfNLcqFRM8=
+		}
+
 		rewrite * {path}
-    reverse_proxy pgweb:8081
+		reverse_proxy @is_admin pgweb:8081
+		redir /login/ 401
 	}
 
 	handle_path /static/previews/* {
@@ -32,5 +43,4 @@
 		try_files {path}.html {path} /index.html
 		file_server
 	}
-  
 }