add authentication method

internal/httpapp/app.go

@@ -4,11 +4,16 @@ import (
 	"fmt"
 	"html/template"
 	"net/http"
+	"os"
 	"path/filepath"
 	"time"
 
+	"gitea.avt.data-center.id/othman.suseno/atlas/internal/audit"
+	"gitea.avt.data-center.id/othman.suseno/atlas/internal/auth"
+	"gitea.avt.data-center.id/othman.suseno/atlas/internal/db"
 	"gitea.avt.data-center.id/othman.suseno/atlas/internal/job"
 	"gitea.avt.data-center.id/othman.suseno/atlas/internal/snapshot"
+	"gitea.avt.data-center.id/othman.suseno/atlas/internal/storage"
 	"gitea.avt.data-center.id/othman.suseno/atlas/internal/zfs"
 )
 
@@ -16,6 +21,7 @@ type Config struct {
 	Addr         string
 	TemplatesDir string
 	StaticDir    string
+	DatabasePath string // Path to SQLite database (empty = in-memory mode)
 }
 
 type App struct {
@@ -26,6 +32,13 @@ type App struct {
 	snapshotPolicy *snapshot.PolicyStore
 	jobManager     *job.Manager
 	scheduler      *snapshot.Scheduler
+	authService    *auth.Service
+	userStore      *auth.UserStore
+	auditStore     *audit.Store
+	smbStore       *storage.SMBStore
+	nfsStore       *storage.NFSStore
+	iscsiStore     *storage.ISCSIStore
+	database       *db.DB // Optional database connection
 }
 
 func New(cfg Config) (*App, error) {
@@ -46,6 +59,29 @@ func New(cfg Config) (*App, error) {
 	jobMgr := job.NewManager()
 	scheduler := snapshot.NewScheduler(policyStore, zfsService, jobMgr)
 
+	// Initialize database (optional)
+	var database *db.DB
+	if cfg.DatabasePath != "" {
+		dbConn, err := db.New(cfg.DatabasePath)
+		if err != nil {
+			return nil, fmt.Errorf("init database: %w", err)
+		}
+		database = dbConn
+	}
+
+	// Initialize auth
+	jwtSecret := os.Getenv("ATLAS_JWT_SECRET")
+	authService := auth.New(jwtSecret)
+	userStore := auth.NewUserStore(authService)
+
+	// Initialize audit logging (keep last 10000 logs)
+	auditStore := audit.NewStore(10000)
+
+	// Initialize storage services
+	smbStore := storage.NewSMBStore()
+	nfsStore := storage.NewNFSStore()
+	iscsiStore := storage.NewISCSIStore()
+
 	a := &App{
 		cfg:            cfg,
 		tmpl:           tmpl,
@@ -54,6 +90,13 @@ func New(cfg Config) (*App, error) {
 		snapshotPolicy: policyStore,
 		jobManager:     jobMgr,
 		scheduler:      scheduler,
+		authService:    authService,
+		userStore:      userStore,
+		auditStore:     auditStore,
+		smbStore:       smbStore,
+		nfsStore:       nfsStore,
+		iscsiStore:     iscsiStore,
+		database:       database,
 	}
 
 	// Start snapshot scheduler (runs every 15 minutes)
@@ -64,8 +107,8 @@ func New(cfg Config) (*App, error) {
 }
 
 func (a *App) Router() http.Handler {
-	// Wrap the mux with basic middleware chain
-	return requestID(logging(a.mux))
+	// Wrap the mux with middleware chain: requestID -> logging -> audit -> auth
+	return requestID(logging(a.auditMiddleware(a.authMiddleware(a.mux))))
 }
 
 // StopScheduler stops the snapshot scheduler (for graceful shutdown)
@@ -73,6 +116,10 @@ func (a *App) StopScheduler() {
 	if a.scheduler != nil {
 		a.scheduler.Stop()
 	}
+	// Close database connection if present
+	if a.database != nil {
+		a.database.Close()
+	}
 }
 
 // routes() is now in routes.go