use tonic::{transport::Server, Request, Response, Status};

use tonic::{transport::{Server, ServerTlsConfig, Identity}, metadata::MetadataValue, Request, Response, Status};
use tonic::service::interceptor::InterceptedService;

    let cert = tokio::fs::read("server.pem").await?;
    let key = tokio::fs::read("server.key").await?;
    let identity = Identity::from_pem(cert, key);

    let bookstore_svc = BookstoreServer::with_interceptor(bookstore, check_auth);

    let reflection_service_svc = InterceptedService::new(reflection_service, check_auth);

        .add_service(BookstoreServer::new(bookstore))
        .add_service(reflection_service) // Add this

        .tls_config(ServerTlsConfig::new().identity(identity))?
        .add_service(bookstore_svc)
        .add_service(reflection_service_svc) // Add this

}
fn check_auth(req: Request<()>) -> Result<Request<()>, Status> {
    let token: MetadataValue<_> = "Bearer test-token".parse().unwrap();
    let req_token = req.metadata().get("authorization");
    println!("DEBUG: authorization token - {:?}", req_token);
    match req.metadata().get("authorization") {
        Some(t) if token == t => Ok(req),
        _ => Err(Status::unauthenticated("No malid auth token")),
    }

tonic = "0.8.2"

tonic = { version = "0.8.2", features = ["tls", "tls-roots"] }

tokio = { version = "1.21.2", features = ["macros", "rt-multi-thread"] }

tokio = { version = "1.21.2", features = ["full"] }