Mets ton notch au travail.

1import Foundation
2
3actor AuthGuard {
4    private let tokens: TokenStore
5
6    func authorize(_ request: Request) async throws -> Session {
7        guard let token = request.bearerToken else {
8            throw AuthError.missingToken
9        }
10        let session = try await tokens.verify(token)
11        if session.isExpired {
12            return try await tokens.refresh(session)
13        }
14        return session
15    }
16
17    // Next: the expiry test
18    func expiresAt(_ session: Session) -> Date {
19        session.claims["exp"]
20    }
21}