convert whitelist to exempt list

Author: akulgoel96

internal/router/auth.go

@@ -181,40 +181,20 @@ func (r *RouterServer) AuthHandler(ctx *context.Context, h http.Handler) http.Ha
 
 			// CustomAuth
 			if isBasicAuth {
-				allowedUsers := []string{
-					"upi-offering-service-payments.de-apps@razorpay.com",
-					"reporting-service-platform-r1cxp.de-apps@razorpay.com",
-					"cross-border-import-service-payments.de-apps@razorpay.com",
-					"1cc-shipping-service-payments.de-apps@razorpay.com",
-					"catalyst-service-payments.de-apps@razorpay.com",
-					"catalyst-service-payments.de-apps%40razorpay.com",
-					"cross-border-payments-service-payments.de-apps@razorpay.com",
-					"cross-border-payments-service-payments.de-apps%40razorpay.com",
-					"cmma-service-payments.de-apps@razorpay.com",
-					"cmma-service-payments.de-apps%40razorpay.com",
-					"merchants-risk-payments.de-apps@razorpay.com",
-					"merchants-risk-payments.de-apps%40razorpay.com",
-					"charge-collections-service-platform-r1cxp.de-apps@razorpay.com",
-					"charge-collections-service-platform-r1cxp.de-apps%40razorpay.com",
-					"payments-bank-transfers-service-payments.de-apps@razorpay.com",
-					"payments-bank-transfers-service-payments.de-apps%40razorpay.com",
-					"ade-service-security.de-apps@razorpay.com",
-					"ade-service-security.de-apps%40razorpay.com",
-					"merchant-experience-service-platforms.de-apps@razorpay.com",
-					"merchant-experience-service-platforms.de-apps%40razorpay.com",
-					"insights-service-data-org.de-apps@razorpay.com",
-					"insights-service-data-org.de-apps%40razorpay.com",
-					"governor-service-payments.de-apps@razorpay.com",
-					"governor-service-payments.de-apps%40razorpay.com",
-					"shield-service-payments.de-apps@razorpay.com",
-					"shield-service-payments.de-apps%40razorpay.com",
+				exemptedUsers := []string{
+					"capital-scorecard",
+					"care",
+					"cyber-helpdesk",
+					"datum",
+					"disputes",
+					"magic-checkout",
+					"partnerships",
+					"prod_api",
 					"api-service-payments.de-apps@razorpay.com",
-					"api-service-payments.de-apps%40razorpay.com",
-					"pgos-service-payments.de-apps@razorpay.com",
-					"pgos-service-payments.de-apps%40razorpay.com",
+					"settlements",
 				}
 
-				if utils.SliceContains(allowedUsers, username) {
+				if !utils.SliceContains(exemptedUsers, username) {
 					if u := trinoheaders.Get(trinoheaders.User, req); u != username {
 						errorMsg := fmt.Sprintf("Username from basicauth - %s does not match with User principal - %s", username, u)
 						provider.Logger(*ctx).Debug(errorMsg)
@@ -226,7 +206,7 @@ func (r *RouterServer) AuthHandler(ctx *context.Context, h http.Handler) http.Ha
 					req.Header.Del("Authorization")
 					isAuthenticated, err := r.authService.Authenticate(ctx, username, password)
 					if err != nil {
-						errorMsg := fmt.Sprintf("Unable to Authenticate users. Getting error - %s", err)
+						errorMsg := fmt.Sprintf("Unable to Authenticate user: %s. Getting error - %s", username, err)
 						provider.Logger(*ctx).Error(errorMsg)
 						http.Error(w, "Unable to Authenticate the user", http.StatusNotFound)
 						return