Add CORS middleware and authentication middleware to the API server.

The `setupRouter` function in `main.go` now includes a CORS middleware and a token authentication middleware. The CORS middleware allows cross-origin resource sharing by setting the appropriate response headers. The token authentication middleware checks for the presence of an `Authorization` header with a valid bearer token. If the token is missing or invalid, an unauthorized response is returned.

In addition to these changes, a new test file `main_test.go` has been added to test the `/api/v1/auth` route. This test suite includes two test cases: one for successful authentication and one for failed authentication.

Update go.mod to include new dependencies.

The `go.mod` file has been modified to include two new dependencies: `github.com/spf13/viper` and `github.com/stretchr/testify`.

Ignore go.sum changes.

Ignore changes in the `go.sum` file, as they only include updates to existing dependencies.

1 files changed, 56 insertions, 0 deletions

diff --git a/api/cmd/main_test.go b/api/cmd/main_test.go
new file mode 100644
index 0000000..8d0df8d
--- /dev/null
+++ b/api/cmd/main_test.go
@@ -0,0 +1,56 @@
+package main
+
+import (
+        "encoding/json"
+        "log"
+        "net/http"
+        "net/http/httptest"
+        "testing"
+
+        "github.com/spf13/viper"
+        "github.com/stretchr/testify/assert"
+)
+
+func getTestUserCredentials() (string, string) {
+        viper.SetConfigName(".env")
+        viper.AddConfigPath(".")
+        err := viper.ReadInConfig()
+        if err != nil {
+                log.Fatalf("Error while reading config file %s", err)
+        }
+        
+        testUser := viper.GetString("TEST_USER")
+        testPass := viper.GetString("TEST_PASS")
+        return testUser, testPass
+}
+
+func TestAuthRoute(t *testing.T) {
+        router := setupRouter()
+        
+        username, password := getTestUserCredentials()
+
+        w := httptest.NewRecorder()
+        req, _ := http.NewRequest("POST", "/api/v1/auth", nil)
+        req.SetBasicAuth(username, password)
+        router.ServeHTTP(w, req)
+
+        assert.Equal(t, http.StatusOK, w.Code, "response should return a 200 code")
+
+        var response map[string]interface{}
+        _ = json.Unmarshal(w.Body.Bytes(), &response)
+        _, exists := response["token"]
+        assert.True(t, exists, "response should return a token")
+}
+
+func TestAuthRouteFailure(t *testing.T) {
+        router := setupRouter()
+
+        w := httptest.NewRecorder()
+        req, _ := http.NewRequest("POST", "/api/v1/auth", nil)
+        req.SetBasicAuth("asdf", "asdf")
+        router.ServeHTTP(w, req)
+
+        assert.Equal(t, http.StatusUnauthorized, w.Code, "should return a 401 code")
+}
+
+func Test
\ No newline at end of file