wip: session auth middleware

internal/api/api.go

@@ -6,6 +6,8 @@ import (
 	"github.com/go-playground/validator/v10"
 	"github.com/labstack/echo/v4"
 	"github.com/labstack/echo/v4/middleware"
+	"github.com/labstack/echo-contrib/session"
+	"github.com/gorilla/sessions"
 
 	"github.com/hazemKrimi/crimson-vault/internal/lib"
 	"github.com/hazemKrimi/crimson-vault/internal/models"
@@ -32,10 +34,12 @@ func (api *API) Initialize() {
 	api.instance = ech
 	api.db = db
 
-	api.ClientRoutes()
-	api.UserRoutes()
+	// TODO: Change and store the secret separately when finilizing v1.
+	api.instance.Use(session.Middleware(sessions.NewCookieStore([]byte("SECRET"))))
 	api.instance.Use(middleware.CORSWithConfig(middleware.CORSConfig{
 		AllowOrigins: []string{"*"},
 	}))
+	api.ClientRoutes()
+	api.UserRoutes()
 	api.instance.Logger.Fatal(api.instance.Start(fmt.Sprintf(":%d", lib.DEFAULT_PORT)))
 }