82 lines
2.7 KiB
Go
82 lines
2.7 KiB
Go
package captcha
|
||
|
||
import (
|
||
"context"
|
||
"net/http"
|
||
"os"
|
||
"strings"
|
||
|
||
"tydata-server/common/xerr"
|
||
|
||
captcha20230305 "github.com/alibabacloud-go/captcha-20230305/client"
|
||
openapi "github.com/alibabacloud-go/darabonba-openapi/v2/client"
|
||
"github.com/alibabacloud-go/tea/tea"
|
||
"github.com/pkg/errors"
|
||
)
|
||
|
||
// contextKey 用于在 context 中存储 *http.Request，供 VerifyWithRequest 判断微信等环境
|
||
type contextKey struct{}
|
||
|
||
// HTTPRequestContextKey 为 context 中 http.Request 的 key，handler 可将 r 注入后传入 logic
|
||
var HTTPRequestContextKey = &contextKey{}
|
||
|
||
// isWeChatClient 根据 User-Agent 判断是否为微信内置浏览器/小程序环境（此类环境可不传 captchaVerifyParam，默认通过）
|
||
func isWeChatClient(r *http.Request) bool {
|
||
if r == nil {
|
||
return false
|
||
}
|
||
ua := strings.ToLower(r.Header.Get("User-Agent"))
|
||
return strings.Contains(ua, "micromessenger") || strings.Contains(ua, "miniprogram")
|
||
}
|
||
|
||
type Config struct {
|
||
AccessKeyID string
|
||
AccessKeySecret string
|
||
EndpointURL string
|
||
SceneID string
|
||
}
|
||
|
||
// VerifyWithRequest 在 Verify 基础上支持按请求头判断：微信/小程序环境下可不传 captchaVerifyParam，默认通过。
|
||
// 若 ctx 中带有 HTTPRequestContextKey 的 *http.Request，且 User-Agent 为微信环境，则不再校验 captchaVerifyParam。
|
||
func VerifyWithRequest(cfg Config, captchaVerifyParam string, ctx context.Context) error {
|
||
if ctx != nil {
|
||
if req, ok := ctx.Value(HTTPRequestContextKey).(*http.Request); ok && isWeChatClient(req) {
|
||
return nil
|
||
}
|
||
}
|
||
return Verify(cfg, captchaVerifyParam)
|
||
}
|
||
|
||
func Verify(cfg Config, captchaVerifyParam string) error {
|
||
if os.Getenv("ENV") == "development" {
|
||
return nil
|
||
}
|
||
|
||
if captchaVerifyParam == "" {
|
||
return errors.Wrapf(xerr.NewErrMsg("图形验证码校验失败，captchaVerifyParam 不能为空"), "empty captchaVerifyParam")
|
||
}
|
||
|
||
clientCfg := &openapi.Config{
|
||
AccessKeyId: tea.String(cfg.AccessKeyID),
|
||
AccessKeySecret: tea.String(cfg.AccessKeySecret),
|
||
}
|
||
clientCfg.Endpoint = tea.String(cfg.EndpointURL)
|
||
client, err := captcha20230305.NewClient(clientCfg)
|
||
if err != nil {
|
||
return errors.Wrapf(xerr.NewErrMsg("图形验证码校验失败"), "new client error: %+v", err)
|
||
}
|
||
|
||
req := &captcha20230305.VerifyIntelligentCaptchaRequest{
|
||
SceneId: tea.String(cfg.SceneID),
|
||
CaptchaVerifyParam: tea.String(captchaVerifyParam),
|
||
}
|
||
resp, err := client.VerifyIntelligentCaptcha(req)
|
||
if err != nil {
|
||
return errors.Wrapf(xerr.NewErrMsg("图形验证码校验失败"), "verify request error: %+v", err)
|
||
}
|
||
if tea.BoolValue(resp.Body.Result.VerifyResult) {
|
||
return nil
|
||
}
|
||
return errors.Wrapf(xerr.NewErrMsg("图形验证码校验失败"), "verify result false")
|
||
}
|