f

app/main/api/internal/middleware/userauthinterceptormiddleware.go

@@ -0,0 +1,35 @@
+package middleware
+
+import (
+	"net/http"
+	"qnc-server/app/main/model"
+	"qnc-server/common/ctxdata"
+	"qnc-server/common/xerr"
+
+	"github.com/pkg/errors"
+	"github.com/zeromicro/go-zero/rest/httpx"
+)
+
+type UserAuthInterceptorMiddleware struct {
+}
+
+func NewUserAuthInterceptorMiddleware() *UserAuthInterceptorMiddleware {
+	return &UserAuthInterceptorMiddleware{}
+}
+
+func (m *UserAuthInterceptorMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		claims, err := ctxdata.GetClaimsFromCtx(r.Context())
+		if err != nil {
+			httpx.Error(w, errors.Wrapf(xerr.NewErrCode(ErrCodeUnauthorized), "token解析失败: %v", err))
+			return
+		}
+		// 检查用户是否绑定了mobile（没有mobile表示是临时用户，不允许访问需要认证的接口）
+		// 注：临时用户现在基于 mobile 字段判断，而不是 UserType
+		if claims.UserType == model.UserTypeTemp {
+			httpx.Error(w, errors.Wrapf(xerr.NewErrCode(xerr.USER_NEED_BIND_MOBILE), "请先绑定手机号: %v", err))
+			return
+		}
+		next(w, r)
+	}
+}