wireguard-dashboard/middleware/authorization.go
coward 3e112cb672
Some checks reported errors
continuous-integration/drone/tag Build was killed
🎨优化token生成以及加强验证
2024-06-18 15:20:17 +08:00

57 lines
1.3 KiB
Go
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

package middleware
import (
"github.com/gin-gonic/gin"
"strings"
"wireguard-dashboard/component"
"wireguard-dashboard/constant"
"wireguard-dashboard/repository"
"wireguard-dashboard/utils"
)
// Authorization
// @description: 授权中间件
// @return gin.HandlerFunc
func Authorization() gin.HandlerFunc {
return func(c *gin.Context) {
token := c.GetHeader("Authorization")
if token == "" || !strings.HasPrefix(token, "Bearer ") {
utils.GinResponse(c).AuthorizationFailed()
c.Abort()
return
}
userClaims, err := component.JWT().ParseToken(token)
if err != nil {
utils.GinResponse(c).AuthorizationFailed()
c.Abort()
return
}
// 如果token的颁发者与请求的站点不一致则直接给它狗日的丢出去
if userClaims.Issuer != utils.GetHost(c.Request.Header.Get("Referer")) {
utils.GinResponse(c).AuthorizationFailed()
c.Abort()
return
}
// 查询用户
user, err := repository.User().GetUserById(userClaims.ID)
if err != nil {
utils.GinResponse(c).FailedWithMsg("用户不存在")
c.Abort()
return
}
if user.Status != constant.Normal {
utils.GinResponse(c).FailedWithMsg("用户状态异常,请联系管理员处理!")
c.Abort()
return
}
// 将用户信息放入上下文
c.Set("user", user)
c.Next()
}
}