55 lines
1.4 KiB
Go
55 lines
1.4 KiB
Go
|
package middleware
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"context"
|
|||
|
|
"errors"
|
|||
|
|
"github.com/zeromicro/go-zero/core/logx"
|
|||
|
|
xhttp "github.com/zeromicro/x/http"
|
|||
|
|
"tianyuan-api/apps/gateway/internal/config"
|
|||
|
|
jwtx "tianyuan-api/pkg/jwt"
|
|||
|
|
"net/http"
|
|||
|
|
"time"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
type AuthInterceptorMiddleware struct {
|
|||
|
|
Config config.Config
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func NewAuthInterceptorMiddleware(c config.Config) *AuthInterceptorMiddleware {
|
|||
|
|
return &AuthInterceptorMiddleware{
|
|||
|
|
Config: c,
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (m *AuthInterceptorMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
|
|||
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|||
|
|
// 从 Cookie 中获取 JWT
|
|||
|
|
cookie, err := r.Cookie("Authorization")
|
|||
|
|
if err != nil {
|
|||
|
|
xhttp.JsonBaseResponseCtx(r.Context(), w, errors.New("用户未登录"))
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
tokenStr := cookie.Value
|
|||
|
|
// 验证并解析 JWT
|
|||
|
|
userId, err := jwtx.ParseJwtToken(tokenStr, m.Config.AuthJWT.AccessSecret)
|
|||
|
|
if err != nil {
|
|||
|
|
// 设置过期的 Cookie 来删除无效的 Token
|
|||
|
|
http.SetCookie(w, &http.Cookie{
|
|||
|
|
Name: "Authorization",
|
|||
|
|
Value: "",
|
|||
|
|
Path: "/",
|
|||
|
|
HttpOnly: true,
|
|||
|
|
Expires: time.Unix(0, 0), // 过期时间设置为过去
|
|||
|
|
})
|
|||
|
|
logx.Error("Invalid JWT: ", err)
|
|||
|
|
xhttp.JsonBaseResponseCtx(r.Context(), w, errors.New("未经授权的访问"))
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 将 userId 存入 context，供后续逻辑使用
|
|||
|
|
ctx := context.WithValue(r.Context(), "userId", userId)
|
|||
|
|
next(w, r.WithContext(ctx))
|
|||
|
|
}
|
|||
|
|
}
|