54 lines
1.5 KiB
Go
54 lines
1.5 KiB
Go
package middleware
|
||
|
||
import (
|
||
"github.com/exhibition-main/internal/model"
|
||
"github.com/exhibition-main/internal/msg"
|
||
"github.com/exhibition-main/internal/response"
|
||
"github.com/exhibition-main/pkg/jwt"
|
||
"github.com/gin-gonic/gin"
|
||
|
||
"strings"
|
||
)
|
||
|
||
// JWTAuthMiddleware 基于JWT的认证中间件
|
||
func JWTAuthMiddleware() func(c *gin.Context) {
|
||
return func(c *gin.Context) {
|
||
authHeader := c.Request.Header.Get("Authorization")
|
||
if authHeader == "" {
|
||
response.ResponseQuickMsg(c, msg.Fail, msg.NEED_LOGIN, nil)
|
||
c.Abort()
|
||
return
|
||
}
|
||
// 按空格分割
|
||
parts := strings.SplitN(authHeader, " ", 2)
|
||
if !(len(parts) == 2 && parts[0] == "Bearer") {
|
||
response.ResponseMsg(c, msg.StatusUnauthorized, model.Response{
|
||
Status: msg.Fail,
|
||
Data: nil,
|
||
Msg: msg.NEED_LOGIN,
|
||
})
|
||
c.Abort()
|
||
return
|
||
}
|
||
// parts[1]是获取到的tokenString，我们使用之前定义好的解析JWT的函数来解析它
|
||
jwtInfo, err := jwt.ParseToken(parts[1])
|
||
if err != nil {
|
||
response.ResponseMsg(c, msg.StatusUnauthorized, model.Response{
|
||
Status: msg.Fail,
|
||
Data: nil,
|
||
Msg: msg.INVALID_TOKEN,
|
||
})
|
||
c.Abort()
|
||
return
|
||
}
|
||
// 将当前请求的userID信息保存到请求的上下文c上
|
||
c.Set(model.CTX_USER_INFO, jwt.MyClaims{
|
||
UserId: jwtInfo.UserId,
|
||
Nickname: jwtInfo.Nickname,
|
||
Phone: jwtInfo.Phone,
|
||
Openid: jwtInfo.Openid,
|
||
})
|
||
c.Next() // 后续的处理请求的函数中 可以用过c.Get(CtxUserIDKey) 来获取当前请求的用户信息
|
||
}
|
||
}
|