[AFP-91] 🛂 Add 'AuthWebFilter' to intercept requests before passing to controller (@asegers)

backend/order-management/src/main/java/com/afp/ordermanagement/config/AuthWebFilter.java

+package com.afp.ordermanagement.config;
+
+import com.afp.ordermanagement.exception.BadAccessTokenException;
+import com.afp.ordermanagement.service.ManagerTokenVerifier;
+import org.springframework.http.HttpHeaders;
+import org.springframework.stereotype.Component;
+import org.springframework.web.server.ServerWebExchange;
+import org.springframework.web.server.WebFilter;
+import org.springframework.web.server.WebFilterChain;
+import reactor.core.publisher.Mono;
+
+@Component
+public class AuthWebFilter implements WebFilter {
+    @Override
+    public Mono<Void> filter(ServerWebExchange serverWebExchange,
+                             WebFilterChain webFilterChain) {
+//        HttpHeaders headers = serverWebExchange.getRequest().getHeaders();
+//        boolean authHeaderPresent = headers.containsKey("Authorization");
+//        if (!authHeaderPresent) throw new BadAccessTokenException();
+//        String tokenStr = headers.getFirst("Authorization").split("Bearer ")[0];
+//        if (!ManagerTokenVerifier.isTokenValid(tokenStr)) throw new BadAccessTokenException();
+        return webFilterChain.filter(serverWebExchange);
+    }
+}