Initial commit: Basic project structure and dependencies

internal/shared/middleware/request_logger.go

@@ -0,0 +1,241 @@
+package middleware
+
+import (
+	"bytes"
+	"io"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/google/uuid"
+	"go.uber.org/zap"
+)
+
+// RequestLoggerMiddleware 请求日志中间件
+type RequestLoggerMiddleware struct {
+	logger *zap.Logger
+}
+
+// NewRequestLoggerMiddleware 创建请求日志中间件
+func NewRequestLoggerMiddleware(logger *zap.Logger) *RequestLoggerMiddleware {
+	return &RequestLoggerMiddleware{
+		logger: logger,
+	}
+}
+
+// GetName 返回中间件名称
+func (m *RequestLoggerMiddleware) GetName() string {
+	return "request_logger"
+}
+
+// GetPriority 返回中间件优先级
+func (m *RequestLoggerMiddleware) GetPriority() int {
+	return 80 // 中等优先级
+}
+
+// Handle 返回中间件处理函数
+func (m *RequestLoggerMiddleware) Handle() gin.HandlerFunc {
+	return gin.LoggerWithFormatter(func(param gin.LogFormatterParams) string {
+		// 使用zap logger记录请求信息
+		m.logger.Info("HTTP Request",
+			zap.String("client_ip", param.ClientIP),
+			zap.String("method", param.Method),
+			zap.String("path", param.Path),
+			zap.String("protocol", param.Request.Proto),
+			zap.Int("status_code", param.StatusCode),
+			zap.Duration("latency", param.Latency),
+			zap.String("user_agent", param.Request.UserAgent()),
+			zap.Int("body_size", param.BodySize),
+			zap.String("referer", param.Request.Referer()),
+			zap.String("request_id", param.Request.Header.Get("X-Request-ID")),
+		)
+
+		// 返回空字符串，因为我们已经用zap记录了
+		return ""
+	})
+}
+
+// IsGlobal 是否为全局中间件
+func (m *RequestLoggerMiddleware) IsGlobal() bool {
+	return true
+}
+
+// RequestIDMiddleware 请求ID中间件
+type RequestIDMiddleware struct{}
+
+// NewRequestIDMiddleware 创建请求ID中间件
+func NewRequestIDMiddleware() *RequestIDMiddleware {
+	return &RequestIDMiddleware{}
+}
+
+// GetName 返回中间件名称
+func (m *RequestIDMiddleware) GetName() string {
+	return "request_id"
+}
+
+// GetPriority 返回中间件优先级
+func (m *RequestIDMiddleware) GetPriority() int {
+	return 95 // 最高优先级，第一个执行
+}
+
+// Handle 返回中间件处理函数
+func (m *RequestIDMiddleware) Handle() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		// 获取或生成请求ID
+		requestID := c.GetHeader("X-Request-ID")
+		if requestID == "" {
+			requestID = uuid.New().String()
+		}
+
+		// 设置请求ID到上下文和响应头
+		c.Set("request_id", requestID)
+		c.Header("X-Request-ID", requestID)
+
+		// 添加到响应头，方便客户端追踪
+		c.Writer.Header().Set("X-Request-ID", requestID)
+
+		c.Next()
+	}
+}
+
+// IsGlobal 是否为全局中间件
+func (m *RequestIDMiddleware) IsGlobal() bool {
+	return true
+}
+
+// SecurityHeadersMiddleware 安全头部中间件
+type SecurityHeadersMiddleware struct{}
+
+// NewSecurityHeadersMiddleware 创建安全头部中间件
+func NewSecurityHeadersMiddleware() *SecurityHeadersMiddleware {
+	return &SecurityHeadersMiddleware{}
+}
+
+// GetName 返回中间件名称
+func (m *SecurityHeadersMiddleware) GetName() string {
+	return "security_headers"
+}
+
+// GetPriority 返回中间件优先级
+func (m *SecurityHeadersMiddleware) GetPriority() int {
+	return 85 // 高优先级
+}
+
+// Handle 返回中间件处理函数
+func (m *SecurityHeadersMiddleware) Handle() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		// 设置安全头部
+		c.Header("X-Content-Type-Options", "nosniff")
+		c.Header("X-Frame-Options", "DENY")
+		c.Header("X-XSS-Protection", "1; mode=block")
+		c.Header("Referrer-Policy", "strict-origin-when-cross-origin")
+		c.Header("Content-Security-Policy", "default-src 'self'")
+		c.Header("Strict-Transport-Security", "max-age=31536000; includeSubDomains")
+
+		c.Next()
+	}
+}
+
+// IsGlobal 是否为全局中间件
+func (m *SecurityHeadersMiddleware) IsGlobal() bool {
+	return true
+}
+
+// ResponseTimeMiddleware 响应时间中间件
+type ResponseTimeMiddleware struct{}
+
+// NewResponseTimeMiddleware 创建响应时间中间件
+func NewResponseTimeMiddleware() *ResponseTimeMiddleware {
+	return &ResponseTimeMiddleware{}
+}
+
+// GetName 返回中间件名称
+func (m *ResponseTimeMiddleware) GetName() string {
+	return "response_time"
+}
+
+// GetPriority 返回中间件优先级
+func (m *ResponseTimeMiddleware) GetPriority() int {
+	return 75 // 中等优先级
+}
+
+// Handle 返回中间件处理函数
+func (m *ResponseTimeMiddleware) Handle() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		start := time.Now()
+
+		c.Next()
+
+		// 计算响应时间并添加到头部
+		duration := time.Since(start)
+		c.Header("X-Response-Time", duration.String())
+
+		// 记录到上下文中，供其他中间件使用
+		c.Set("response_time", duration)
+	}
+}
+
+// IsGlobal 是否为全局中间件
+func (m *ResponseTimeMiddleware) IsGlobal() bool {
+	return true
+}
+
+// RequestBodyLoggerMiddleware 请求体日志中间件（用于调试）
+type RequestBodyLoggerMiddleware struct {
+	logger *zap.Logger
+	enable bool
+}
+
+// NewRequestBodyLoggerMiddleware 创建请求体日志中间件
+func NewRequestBodyLoggerMiddleware(logger *zap.Logger, enable bool) *RequestBodyLoggerMiddleware {
+	return &RequestBodyLoggerMiddleware{
+		logger: logger,
+		enable: enable,
+	}
+}
+
+// GetName 返回中间件名称
+func (m *RequestBodyLoggerMiddleware) GetName() string {
+	return "request_body_logger"
+}
+
+// GetPriority 返回中间件优先级
+func (m *RequestBodyLoggerMiddleware) GetPriority() int {
+	return 70 // 较低优先级
+}
+
+// Handle 返回中间件处理函数
+func (m *RequestBodyLoggerMiddleware) Handle() gin.HandlerFunc {
+	if !m.enable {
+		return func(c *gin.Context) {
+			c.Next()
+		}
+	}
+
+	return func(c *gin.Context) {
+		// 只记录POST, PUT, PATCH请求的body
+		if c.Request.Method == "POST" || c.Request.Method == "PUT" || c.Request.Method == "PATCH" {
+			if c.Request.Body != nil {
+				bodyBytes, err := io.ReadAll(c.Request.Body)
+				if err == nil {
+					// 重新设置body供后续处理使用
+					c.Request.Body = io.NopCloser(bytes.NewBuffer(bodyBytes))
+
+					// 记录请求体（注意：生产环境中应该谨慎记录敏感信息）
+					m.logger.Debug("Request Body",
+						zap.String("method", c.Request.Method),
+						zap.String("path", c.Request.URL.Path),
+						zap.String("body", string(bodyBytes)),
+						zap.String("request_id", c.GetString("request_id")),
+					)
+				}
+			}
+		}
+
+		c.Next()
+	}
+}
+
+// IsGlobal 是否为全局中间件
+func (m *RequestBodyLoggerMiddleware) IsGlobal() bool {
+	return false // 可选中间件，不是全局的
+}