Authenticated API Endpoint

🔐 Authenticated API Endpoint

In this example, you’ll learn how to protect an API route using a custom authentication middleware. This is useful for securing endpoints that require tokens, API keys, or session headers.

---

🧱 Project Structure

authenticated-api/
├── CMakeLists.txt
├── src/
│   ├── main.cpp
│   └── middleware/
│       └── auth.cpp
└── include/
  └── middleware/
      └── auth.hpp

---

📄 CMakeLists.txt

cmake_minimum_required(VERSION 3.16)
project(authenticated_api)

set(CMAKE_CXX_STANDARD 20)

include(FetchContent)

FetchContent_Declare(
zuno
GIT_REPOSITORY https://github.com/ZunoFramework/zuno.git
GIT_TAG        main
)

FetchContent_MakeAvailable(zuno)

include_directories(include)

add_executable(authenticated-api
src/main.cpp
src/middleware/auth.cpp
)

target_link_libraries(authenticated-api PRIVATE zuno)

---

📄 src/main.cpp

#include <zuno/zuno.hpp>
#include "middleware/auth.hpp"

int main() {
zuno::App app;

app.get("/public", [](auto& req, auto& res) {
  res.send("This is a public endpoint.");
});

app.get("/private", authMiddleware, [](auto& req, auto& res) {
  res.send("Access granted to private data.");
});

app.listen(3000);
}

---

📄 src/middleware/auth.cpp

#include <zuno/zuno.hpp>
#include "middleware/auth.hpp"

Middleware authMiddleware = [](auto& req, auto& res, Next next) {
auto auth = req.headers["Authorization"];

if (auth != "Bearer secret-token") {
  res.status(401).send("Unauthorized");
  return;
}

next(); // Proceed to the route handler
};

---

📄 include/middleware/auth.hpp

#pragma once
#include <zuno/zuno.hpp>

extern Middleware authMiddleware;

---

🧪 Test the API

curl http://localhost:3000/public
# → This is a public endpoint.

curl http://localhost:3000/private
# → Unauthorized

curl -H "Authorization: Bearer secret-token" http://localhost:3000/private
# → Access granted to private data.

---

🧭 What’s Next?

• Add Rate Limiting to protect login endpoints
• Use TLS to encrypt credentials
• Return JSON error responses for consistency

---

Zuno makes it easy to secure your endpoints with clean, modular middleware—just like modern frameworks should.