dropped fiber for std http + gorilla websocket

Session serialization will use gob encoding instead of json.
Binary size will likely be reduced.
General backend code refactoring.

server/middleware/jwt.go

@@ -2,10 +2,10 @@ package middlewares
 
 import (
 	"fmt"
+	"net/http"
 	"os"
 	"time"
 
-	"github.com/gofiber/fiber/v2"
 	"github.com/golang-jwt/jwt/v5"
 	"github.com/marcopeocchi/yt-dlp-web-ui/server/config"
 )
@@ -14,37 +14,49 @@ const (
 	TOKEN_COOKIE_NAME = "jwt"
 )
 
-var Authenticated = func(c *fiber.Ctx) error {
-	if !config.Instance().GetConfig().RequireAuth {
-		return c.Next()
-	}
-
-	cookie := c.Cookies(TOKEN_COOKIE_NAME)
-
-	if cookie == "" {
-		return c.Status(fiber.StatusUnauthorized).SendString("invalid token")
-	}
-
-	token, _ := jwt.Parse(cookie, func(t *jwt.Token) (interface{}, error) {
-		if _, ok := t.Method.(*jwt.SigningMethodHMAC); !ok {
-			return nil, fmt.Errorf("unexpected signing method: %v", t.Header["alg"])
+func Authenticated(next http.Handler) http.Handler {
+	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		if !config.Instance().GetConfig().RequireAuth {
+			next.ServeHTTP(w, r)
+			return
 		}
-		return []byte(os.Getenv("JWT_SECRET")), nil
-	})
 
-	if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
-		expiresAt, err := time.Parse(time.RFC3339, claims["expiresAt"].(string))
+		cookie, err := r.Cookie(TOKEN_COOKIE_NAME)
 
 		if err != nil {
-			return c.SendStatus(fiber.StatusInternalServerError)
+			http.Error(w, "invalid token", http.StatusBadRequest)
+			return
 		}
 
-		if time.Now().After(expiresAt) {
-			return c.Status(fiber.StatusBadRequest).SendString("expired token")
+		if cookie == nil {
+			http.Error(w, "invalid token", http.StatusBadRequest)
+			return
 		}
-	} else {
-		return c.Status(fiber.StatusUnauthorized).SendString("invalid token")
-	}
 
-	return c.Next()
+		token, _ := jwt.Parse(cookie.Value, func(t *jwt.Token) (interface{}, error) {
+			if _, ok := t.Method.(*jwt.SigningMethodHMAC); !ok {
+				return nil, fmt.Errorf("unexpected signing method: %v", t.Header["alg"])
+			}
+			return []byte(os.Getenv("JWTSECRET")), nil
+		})
+
+		if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
+			expiresAt, err := time.Parse(time.RFC3339, claims["expiresAt"].(string))
+
+			if err != nil {
+				http.Error(w, err.Error(), http.StatusInternalServerError)
+				return
+			}
+
+			if time.Now().After(expiresAt) {
+				http.Error(w, "token expired", http.StatusBadRequest)
+				return
+			}
+		} else {
+			http.Error(w, "invalid token", http.StatusBadRequest)
+			return
+		}
+
+		next.ServeHTTP(w, r)
+	})
 }