defmodule BtrzAuth.Pipeline.TokenSecured do
  @moduledoc """

  This pipeline will:
  1. Check the x-api-key header is sent and load the implemented resource in `conn.private[:account]`.
  2. Validate the providers if passed via query params.
  3. Add the premium keys of the providers to the ones of the current account.
  4. Verify the token with the private key or the configured main and secondary secret keys in case the token could be an internal one, then ensure authenticated.
  """
  use Guardian.Plug.Pipeline,
    otp_app: :btrz_ex_auth_api,
    error_handler: BtrzAuth.ErrorHandler

  plug(BtrzAuth.Plug.VerifyApiKey)
  plug(BtrzAuth.Plug.VerifyProviders)
  plug(BtrzAuth.Plug.AddPremiumFromProviders)
  plug(BtrzAuth.Plug.VerifyToken)
  plug(Guardian.Plug.EnsureAuthenticated)
end