55 lines
1.2 KiB
Go
55 lines
1.2 KiB
Go
|
package middleware
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"context"
|
|||
|
|
"net/http"
|
|||
|
|
|
|||
|
|
"ycc-server/app/main/api/internal/config"
|
|||
|
|
jwtx "ycc-server/common/jwt"
|
|||
|
|
"ycc-server/common/xerr"
|
|||
|
|
|
|||
|
|
"github.com/pkg/errors"
|
|||
|
|
"github.com/zeromicro/go-zero/rest/httpx"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
const (
|
|||
|
|
// 定义错误码
|
|||
|
|
ErrCodeUnauthorized = 401
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
type AuthInterceptorMiddleware struct {
|
|||
|
|
Config config.Config
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func NewAuthInterceptorMiddleware(c config.Config) *AuthInterceptorMiddleware {
|
|||
|
|
return &AuthInterceptorMiddleware{
|
|||
|
|
Config: c,
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
func (m *AuthInterceptorMiddleware) Handle(next http.HandlerFunc) http.HandlerFunc {
|
|||
|
|
return func(w http.ResponseWriter, r *http.Request) {
|
|||
|
|
// 从请求头中获取Authorization字段
|
|||
|
|
authHeader := r.Header.Get("Authorization")
|
|||
|
|
|
|||
|
|
// 如果没有Authorization头，直接放行
|
|||
|
|
if authHeader == "" {
|
|||
|
|
next(w, r)
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 解析JWT令牌
|
|||
|
|
claims, err := jwtx.ParseJwtToken(authHeader, m.Config.JwtAuth.AccessSecret)
|
|||
|
|
if err != nil {
|
|||
|
|
// JWT解析失败，返回401错误
|
|||
|
|
httpx.Error(w, errors.Wrapf(xerr.NewErrCode(ErrCodeUnauthorized), "token解析失败: %v", err))
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
ctx := context.WithValue(r.Context(), jwtx.ExtraKey, claims)
|
|||
|
|
|
|||
|
|
// 使用新的上下文继续处理请求
|
|||
|
|
next(w, r.WithContext(ctx))
|
|||
|
|
}
|
|||
|
|
}
|