1 files changed, 26 insertions, 0 deletions
diff --git a/internal/unsorted/http_auth.go b/internal/unsorted/http_auth.go
new file mode 100644
index 0000000..b0afa05
--- /dev/null
+++ b/internal/unsorted/http_auth.go
@@ -0,0 +1,26 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// SPDX-FileCopyrightText: Copyright (c) 2025 Runxi Yu <https://runxiyu.org>
+
+package unsorted
+
+import (
+	"net/http"
+)
+
+// getUserFromRequest returns the user ID and username associated with the
+// session cookie in a given [http.Request].
+func (s *Server) getUserFromRequest(request *http.Request) (id int, username string, err error) {
+	var sessionCookie *http.Cookie
+
+	if sessionCookie, err = request.Cookie("session"); err != nil {
+		return
+	}
+
+	err = s.database.QueryRow(
+		request.Context(),
+		"SELECT user_id, COALESCE(username, '') FROM users u JOIN sessions s ON u.id = s.user_id WHERE s.session_id = $1;",
+		sessionCookie.Value,
+	).Scan(&id, &username)
+
+	return
+}