xfc_server_V2/app/main/api/internal/middleware/userauthinterceptormiddleware.go

package middleware

import (
	"context"
	"fmt"
	"net/http"
	"strconv"

	"xingfucha-server/app/main/api/internal/types"
	"xingfucha-server/app/main/model"
	"xingfucha-server/common/ctxdata"
	"xingfucha-server/common/result"
	"xingfucha-server/common/xerr"

	"github.com/pkg/errors"
	"github.com/redis/go-redis/v9"
	"github.com/zeromicro/go-zero/rest/httpx"
)

type UserAuthInterceptorMiddleware struct {
	UserModel model.UserModel
	Redis     RedisStore
}

// RedisStore 仅用于封禁状态缓存的只读+写入接口，避免中间件依赖完整 Redis
type RedisStore interface {
	Get(key string) (string, error)
	Setex(key, value string, seconds int) error
}

func NewUserAuthInterceptorMiddleware(userModel model.UserModel, redisStore RedisStore) *UserAuthInterceptorMiddleware {
	return &UserAuthInterceptorMiddleware{UserModel: userModel, Redis: redisStore}
}

func (m *UserAuthInterceptorMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
	return func(w http.ResponseWriter, r *http.Request) {
		claims, err := ctxdata.GetClaimsFromCtx(r.Context())
		if err != nil {
			httpx.Error(w, errors.Wrapf(xerr.NewErrCode(ErrCodeUnauthorized), "token解析失败: %v", err))
			return
		}
		if claims.UserType == model.UserTypeTemp {
			httpx.Error(w, errors.Wrapf(xerr.NewErrCode(xerr.USER_NEED_BIND_MOBILE), "token解析失败: %v", err))
			return
		}
		disabled, err := m.isUserDisabled(r.Context(), w, claims.UserId)
		if err != nil {
			return // 用户不存在时 isUserDisabled 已写响应
		}
		if disabled {
			msg := xerr.MapErrMsg(xerr.USER_DISABLED)
			httpx.WriteJson(w, http.StatusOK, result.Error(xerr.USER_DISABLED, msg))
			return
		}
		next(w, r)
	}
}

// isUserDisabled 先查 Redis 封禁缓存，未命中再查 DB 并回写缓存，减少对 DB/模型缓存的轮询
func (m *UserAuthInterceptorMiddleware) isUserDisabled(ctx context.Context, w http.ResponseWriter, userID int64) (bool, error) {
	key := fmt.Sprintf(types.UserDisableCacheKey, userID)
	val, err := m.Redis.Get(key)
	if err == nil {
		return val == "1", nil
	}
	if err != redis.Nil {
		// Redis 异常时降级为查库，不阻塞请求
	}
	user, err := m.UserModel.FindOne(ctx, userID)
	if err != nil {
		httpx.Error(w, errors.Wrapf(xerr.NewErrCode(ErrCodeUnauthorized), "用户不存在: %v", err))
		return false, err
	}
	_ = m.Redis.Setex(key, strconv.FormatInt(user.Disable, 10), types.UserDisableCacheTTL)
	return user.Disable == model.UserDisableBanned, nil
}