server: implement authentication

server/api/api.go

@@ -20,16 +20,30 @@ func Start() {
 	})
 
 	r.Route("/whoami", func(r chi.Router) {
+		r.Use(SessionAuthMiddleware)
+		r.Use(LoginCtx)
 		r.Get("/", Whoami)
 	})
 
 	r.Route("/users", func(r chi.Router) {
+		r.Use(SessionAuthMiddleware)
+
 		r.Get("/", ListUsers)
 		r.Route("/{userID}", func(r chi.Router) {
 			r.Get("/", GetUser)
 		})
 	})
 
+	r.Route("/login", func(r chi.Router) {
+		r.Post("/", Login)
+	})
+
+	r.Route("/logout", func(r chi.Router) {
+		r.Use(SessionAuthMiddleware)
+
+		r.Post("/", Logout)
+	})
+
 	r.Route("/register", func(r chi.Router) {
 		r.Post("/", NewUser)
 	})