refactor http service with authentication middleware.

[suzp1984]

What's the problem of http api authentication?

There are a lot of repeated codes in the http api hander func.

oryx/platform/transcript.go

Lines 66 to 78 in 9b475d9

	var token string
	if err := ParseBody(ctx, r.Body, &struct {
	Token *string `json:"token"`
	}{
	Token: &token,
	}); err != nil {
	return errors.Wrapf(err, "parse body")
	}
	apiSecret := envApiSecret()
	if err := Authenticate(ctx, apiSecret, token, r.Header); err != nil {
	return errors.Wrapf(err, "authenticate")
	}

Solution

refactor those token authentication codes to one place.
There are 2 kinds of token verification.

1. Token in http post body.
   middlewareAuthTokenInBody
2. Token in url query.
   middlewareAuthTokenInURL
3. ai-talk.go is an exception, the token authentication depends room token, so keep ai-talk.go.