70 lines
1.8 KiB
Go
70 lines
1.8 KiB
Go
|
package middleware
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"net/http"
|
|||
|
|
"strings"
|
|||
|
|
|
|||
|
|
"tydata-server/app/main/api/internal/config"
|
|||
|
|
"tydata-server/app/main/model"
|
|||
|
|
jwtx "tydata-server/common/jwt"
|
|||
|
|
"tydata-server/common/result"
|
|||
|
|
"tydata-server/common/xerr"
|
|||
|
|
|
|||
|
|
"github.com/zeromicro/go-zero/rest/httpx"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
// UserDisableCheckMiddleware 全局中间件：若当前用户已被封禁(disable=1)，则拒绝请求并返回封禁原因
|
|||
|
|
type UserDisableCheckMiddleware struct {
|
|||
|
|
Config config.Config
|
|||
|
|
UserModel model.UserModel
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// NewUserDisableCheckMiddleware 创建封禁检查中间件
|
|||
|
|
func NewUserDisableCheckMiddleware(c config.Config, userModel model.UserModel) *UserDisableCheckMiddleware {
|
|||
|
|
return &UserDisableCheckMiddleware{
|
|||
|
|
Config: c,
|
|||
|
|
UserModel: userModel,
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// Handle 仅对携带用户 JWT 的请求做封禁校验；无 token 或 admin token 直接放行
|
|||
|
|
func (m *UserDisableCheckMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
|
|||
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|||
|
|
authHeader := r.Header.Get("Authorization")
|
|||
|
|
if authHeader == "" {
|
|||
|
|
next(w, r)
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
token := strings.TrimPrefix(authHeader, "Bearer ")
|
|||
|
|
if token == authHeader {
|
|||
|
|
next(w, r)
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 仅使用用户端 JWT 密钥解析；管理员 token 会解析失败，直接放行由后续中间件处理
|
|||
|
|
claims, err := jwtx.ParseJwtToken(token, m.Config.JwtAuth.AccessSecret)
|
|||
|
|
if err != nil {
|
|||
|
|
next(w, r)
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 查封禁状态不走缓存，封禁后立即生效，已登录用户下次请求即被拒绝
|
|||
|
|
disable, err := m.UserModel.FindDisableByUserId(r.Context(), claims.UserId)
|
|||
|
|
if err != nil {
|
|||
|
|
next(w, r)
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// disable: 0 可用，1 封禁
|
|||
|
|
if disable == 1 {
|
|||
|
|
errcode := xerr.USER_DISABLED
|
|||
|
|
errmsg := xerr.MapErrMsg(errcode)
|
|||
|
|
httpx.WriteJson(w, http.StatusForbidden, result.Error(errcode, errmsg))
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
next(w, r)
|
|||
|
|
}
|
|||
|
|
}
|