let authMiddleware = PrismAuthMiddleware { token in
    // Return true if token is valid
    return token == "my-secret-token"
}

await server.group("/api", middlewares: [authMiddleware]) { api in
    api.get("/protected") { _ in
        .json(["message": "You're in!"])
    }
}

let auth = PrismAuthMiddleware { token in
    let row = try? db.queryFirst(
        "SELECT id FROM api_tokens WHERE token = ? AND expires_at > datetime('now')",
        parameters: [.text(token)]
    )
    return row != nil
}

let sessionStore = PrismMemorySessionStore()
let sessionMiddleware = PrismSessionMiddleware(
    store: sessionStore,
    secret: "your-32-char-secret-key-here!!!!"
)

await server.use(sessionMiddleware)

await server.post("/login") { request in
    let username = request.formData["username"] ?? ""
    // Validate credentials...

    var session = request.session ?? PrismSession()
    session.data["userId"] = "42"
    session.data["username"] = username
    // Session is saved via middleware on response
    return .redirect(to: "/dashboard")
}

await server.get("/dashboard") { request in
    guard let session = request.session,
          let username = session.data["username"] else {
        return .redirect(to: "/login")
    }
    return .html("<h1>Welcome, \(username)!</h1>")
}

struct JWTAuthMiddleware: PrismMiddleware, Sendable {
    func handle(_ request: PrismHTTPRequest, next: @escaping PrismRouteHandler) async throws -> PrismHTTPResponse {
        guard let authHeader = request.headers.value(for: "Authorization"),
              authHeader.hasPrefix("Bearer ") else {
            throw PrismAppError.unauthorized("Missing authorization header")
        }

        let token = String(authHeader.dropFirst(7))

        // Validate your JWT here
        guard let userId = validateJWT(token) else {
            throw PrismAppError.unauthorized("Invalid token")
        }

        var req = request
        req.userInfo["userId"] = userId
        return try await next(req)
    }
}