84 lines
2.4 KiB
Go
84 lines
2.4 KiB
Go
package middleware
|
||
|
||
import (
|
||
"net/http"
|
||
"time"
|
||
|
||
"bd-server/app/main/api/internal/config"
|
||
"bd-server/app/main/model"
|
||
jwtx "bd-server/common/jwt"
|
||
)
|
||
|
||
const (
|
||
HeaderMembershipExpired = "X-Membership-Expired"
|
||
)
|
||
|
||
// MembershipExpiredInterceptor 检测代理会员是否过期，过期则写入响应头
|
||
// 由于是全局中间件（在 AuthInterceptor 之前执行），需要自己从请求头解析 JWT
|
||
type MembershipExpiredInterceptor struct {
|
||
AgentModel model.AgentModel
|
||
Config config.Config
|
||
}
|
||
|
||
func NewMembershipExpiredInterceptor(agentModel model.AgentModel, c config.Config) *MembershipExpiredInterceptor {
|
||
return &MembershipExpiredInterceptor{
|
||
AgentModel: agentModel,
|
||
Config: c,
|
||
}
|
||
}
|
||
|
||
func (m *MembershipExpiredInterceptor) Handle(next http.HandlerFunc) http.HandlerFunc {
|
||
return func(w http.ResponseWriter, r *http.Request) {
|
||
// 先检测会员过期状态（必须在 next() 之前设置响应头，否则响应已发送 header 无法生效）
|
||
needNotifyExpired := false
|
||
|
||
// 由于全局中间件在路由中间件之前执行，context 中可能没有 claims
|
||
// 先尝试从 context 获取，如果没有则自己从 Authorization 头解析
|
||
claims := getClaimsFromContext(r)
|
||
if claims == nil {
|
||
claims = parseClaimsFromAuthHeader(r, m.Config.JwtAuth.AccessSecret)
|
||
}
|
||
|
||
if claims != nil && claims.UserType == model.UserTypeNormal && r.URL.Path != "/api/v1/agent/info" {
|
||
agent, err := m.AgentModel.FindOneByUserId(r.Context(), claims.UserId)
|
||
if err == nil && agent != nil {
|
||
// 到期时间已过，说明会员已过期（不管等级是否已降级为 normal）
|
||
if agent.MembershipExpiryTime.Valid && !agent.MembershipExpiryTime.Time.After(time.Now()) {
|
||
needNotifyExpired = true
|
||
}
|
||
}
|
||
}
|
||
|
||
// 在 next() 之前设置响应头（此时 headers 还没发送给客户端）
|
||
if needNotifyExpired {
|
||
w.Header().Set(HeaderMembershipExpired, "true")
|
||
}
|
||
|
||
// 执行业务逻辑
|
||
next(w, r)
|
||
}
|
||
}
|
||
|
||
func getClaimsFromContext(r *http.Request) *jwtx.JwtClaims {
|
||
value := r.Context().Value(jwtx.ExtraKey)
|
||
if value == nil {
|
||
return nil
|
||
}
|
||
if claims, ok := value.(*jwtx.JwtClaims); ok {
|
||
return claims
|
||
}
|
||
return nil
|
||
}
|
||
|
||
func parseClaimsFromAuthHeader(r *http.Request, secret string) *jwtx.JwtClaims {
|
||
authHeader := r.Header.Get("Authorization")
|
||
if authHeader == "" {
|
||
return nil
|
||
}
|
||
claims, err := jwtx.ParseJwtToken(authHeader, secret)
|
||
if err != nil {
|
||
return nil
|
||
}
|
||
return claims
|
||
}
|