add Bearer prefix to auth header

3 files changed, 8 insertions, 1 deletions

diff --git a/cmd/api/main.go b/cmd/api/main.go
index 7f94372..c74f176 100644
--- a/cmd/api/main.go
+++ b/cmd/api/main.go
@@ -1,6 +1,7 @@
 package main
 
 import (
+	"fmt"
 	"log"
 	"net/http"
 
@@ -26,6 +27,7 @@ func main() {
 
 	router.Handle("/api/private", middleware.EnsureValidToken()(
 		http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+			fmt.Printf("in /api/private handler\n")
 			w.Header().Set("Access-Control-Allow-Credentials", "true")
 			w.Header().Set("Access-Control-Allow-Origin", "*")
 			w.Header().Set("Access-Control-Allow-Headers", "Authorization")
diff --git a/cmd/ui/index.html b/cmd/ui/index.html
index b19ed26..e09e1a2 100644
--- a/cmd/ui/index.html
+++ b/cmd/ui/index.html
@@ -49,12 +49,13 @@
         methods: {
           accessToken() {
             let element = document.querySelector('#app');
-            return element.dataset['token'];
+            return `Bearer ${element.dataset['token']}`;
           },
           fetchPublicData() {
             fetch("http://localhost:3000/api/public")
               .then((x) => x.json())
               .then((x) => this.message = x.message)
+              .catch((error) => this.message = error.message)
           },
           fetchPrivateData() {
             let headers = new Headers();
@@ -62,6 +63,7 @@
             fetch("http://localhost:3000/api/private", { headers: headers })
               .then((x) => x.json())
               .then((x) => this.message = x.message)
+              .catch((error) => this.message = error.message)
           },
           fetchPrivateScopedData() {
             let headers = new Headers();
@@ -69,6 +71,7 @@
             fetch("http://localhost:3000/api/private-scoped", { headers: headers })
               .then((x) => x.json())
               .then((x) => this.message = x.message)
+              .catch((error) => this.message = error.message)
           }
         }
       }).mount('#app')
diff --git a/pkg/middleware/jwt.go b/pkg/middleware/jwt.go
index f48386f..947c3ec 100644
--- a/pkg/middleware/jwt.go
+++ b/pkg/middleware/jwt.go
@@ -2,6 +2,7 @@ package middleware
 
 import (
 	"context"
+	"fmt"
 	"log"
 	"net/http"
 	"net/url"
@@ -56,6 +57,7 @@ func EnsureValidToken() func(next http.Handler) http.Handler {
 	}
 
 	errorHandler := func(w http.ResponseWriter, r *http.Request, err error) {
+		fmt.Printf("Error: %v\n", err)
 		if r.Method == "OPTIONS" {
 			w.Header().Set("Access-Control-Allow-Credentials", "true")
 			w.Header().Set("Access-Control-Allow-Origin", "*")