feat: add template RBAC/groups (#4235)

coderd/httpmw/groupparam.go

@@ -0,0 +1,56 @@
+package httpmw
+
+import (
+	"context"
+	"database/sql"
+	"errors"
+	"net/http"
+
+	"github.com/go-chi/chi/v5"
+
+	"github.com/coder/coder/coderd/database"
+	"github.com/coder/coder/coderd/httpapi"
+	"github.com/coder/coder/codersdk"
+)
+
+type groupParamContextKey struct{}
+
+// GroupParam returns the group extracted via the ExtraGroupParam middleware.
+func GroupParam(r *http.Request) database.Group {
+	group, ok := r.Context().Value(groupParamContextKey{}).(database.Group)
+	if !ok {
+		panic("developer error: group param middleware not provided")
+	}
+	return group
+}
+
+// ExtraGroupParam grabs a group from the "group" URL parameter.
+func ExtractGroupParam(db database.Store) func(http.Handler) http.Handler {
+	return func(next http.Handler) http.Handler {
+		return http.HandlerFunc(func(rw http.ResponseWriter, r *http.Request) {
+			ctx := r.Context()
+
+			groupID, parsed := parseUUID(rw, r, "group")
+			if !parsed {
+				return
+			}
+
+			group, err := db.GetGroupByID(r.Context(), groupID)
+			if errors.Is(err, sql.ErrNoRows) {
+				httpapi.ResourceNotFound(rw)
+				return
+			}
+			if err != nil {
+				httpapi.Write(ctx, rw, http.StatusInternalServerError, codersdk.Response{
+					Message: "Internal error fetching group.",
+					Detail:  err.Error(),
+				})
+				return
+			}
+
+			ctx = context.WithValue(ctx, groupParamContextKey{}, group)
+			chi.RouteContext(ctx).URLParams.Add("organization", group.OrganizationID.String())
+			next.ServeHTTP(rw, r.WithContext(ctx))
+		})
+	}
+}