add subscription_status and trial_ends_at to Tenant; validate in middleware

- Tenant struct gains SubscriptionStatus and TrialEndsAt fields
- Validator returns 401 when tenant has no active subscription and trial has expired
- InMemoryClient returns active subscription for tests

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: reuvenharrison

ds/client_inmemory.go

@@ -1,6 +1,9 @@
 package ds
 
-import "reflect"
+import (
+	"reflect"
+	"time"
+)
 
 type InMemoryClient struct {
 	payload map[Kind]interface{}
@@ -19,8 +22,10 @@ func (c *InMemoryClient) Get(kind Kind, id string, dst interface{}) error {
 
 	if kind == KindTenant {
 		reflect.ValueOf(dst).Elem().Set(reflect.ValueOf(Tenant{
-			Id:   id,
-			Name: "test-123",
+			Id:                 id,
+			Name:               "test-123",
+			SubscriptionStatus: "active",
+			TrialEndsAt:        time.Now().Unix() + 86400,
 		}))
 	}
 

ds/model.go

@@ -1,13 +1,15 @@
 package ds
 
 type Tenant struct {
-	Id           string `datastore:"id" json:"id"`
-	Name         string `datastore:"name" json:"name"`
-	Email        string `datastore:"email" json:"email"`
-	Callback     string `datastore:"callback" json:"callback"`
-	SlackChannel string `datastore:"slack_channel" json:"slack_channel"`
-	Created      int64  `datastore:"created" json:"created"`
-	Comment      int64  `datastore:"comment" json:"comment"`
+	Id                 string `datastore:"id" json:"id"`
+	Name               string `datastore:"name" json:"name"`
+	Email              string `datastore:"email" json:"email"`
+	Callback           string `datastore:"callback" json:"callback"`
+	SlackChannel       string `datastore:"slack_channel" json:"slack_channel"`
+	Created            int64  `datastore:"created" json:"created"`
+	Comment            int64  `datastore:"comment" json:"comment"`
+	SubscriptionStatus string `datastore:"subscription_status" json:"subscription_status"`
+	TrialEndsAt        int64  `datastore:"trial_ends_at" json:"trial_ends_at"`
 }
 
 type Webhook struct {

tenant/tenant.go

@@ -2,6 +2,7 @@ package tenant
 
 import (
 	"net/http"
+	"time"
 
 	"github.com/gorilla/mux"
 	"github.com/oasdiff/go-common/ds"
@@ -29,6 +30,12 @@ func (v *Validator) Validate(next http.Handler) http.Handler {
 			return
 		}
 
+		if t.SubscriptionStatus != "active" && t.TrialEndsAt <= time.Now().Unix() {
+			logrus.Infof("tenant '%s' has no active subscription or trial for request '%s'", id, r.URL.String())
+			w.WriteHeader(http.StatusUnauthorized)
+			return
+		}
+
 		next.ServeHTTP(w, r)
 	})
 }