107 lines
3.0 KiB
Go
107 lines
3.0 KiB
Go
package component
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"gitee.ltd/lxh/logger/log"
|
|
"github.com/golang-jwt/jwt/v5"
|
|
"github.com/google/uuid"
|
|
"strings"
|
|
"time"
|
|
"wireguard-ui/config"
|
|
"wireguard-ui/global/client"
|
|
"wireguard-ui/global/constant"
|
|
)
|
|
|
|
// jwt密钥
|
|
//const secret = "JQo7L1RYa8ArFWuj0wC9PyM3VzmDIfXZ2d5tsTOBhNgviE64bnKqGpSckxUlHey6"
|
|
|
|
type JwtComponent struct {
|
|
ID string `json:"id"`
|
|
jwt.RegisteredClaims
|
|
}
|
|
|
|
// JWT
|
|
// @description: 初始化JWT组件
|
|
// @return JwtComponent
|
|
func JWT() JwtComponent {
|
|
return JwtComponent{}
|
|
}
|
|
|
|
// GenerateToken
|
|
// @description: 生成token
|
|
// @receiver JwtComponent
|
|
// @param userId
|
|
// @param password
|
|
// @return token
|
|
// @return expireTime
|
|
// @return err
|
|
func (JwtComponent) GenerateToken(userId, secret string) (token string, expireTime *jwt.NumericDate, err error) {
|
|
timeNow := time.Now().Local()
|
|
expireTime = jwt.NewNumericDate(timeNow.Add(7 * time.Hour))
|
|
notBefore := jwt.NewNumericDate(timeNow)
|
|
issuedAt := jwt.NewNumericDate(timeNow)
|
|
claims := JwtComponent{
|
|
ID: userId,
|
|
RegisteredClaims: jwt.RegisteredClaims{
|
|
Issuer: config.Config.Http.Endpoint, // 颁发站点
|
|
Subject: "you can you up,no can no bb", // 发布主题
|
|
ExpiresAt: expireTime, // 过期时间
|
|
NotBefore: notBefore, // token不得早于该时间
|
|
IssuedAt: issuedAt, // token颁发时间
|
|
ID: strings.ReplaceAll(uuid.NewString(), "-", ""), // 该token的id
|
|
},
|
|
}
|
|
|
|
t := jwt.NewWithClaims(jwt.SigningMethodHS512, claims)
|
|
token, err = t.SignedString([]byte(secret))
|
|
if err != nil {
|
|
log.Errorf("生成token失败: %v", err.Error())
|
|
return "", nil, errors.New("生成token失败")
|
|
}
|
|
|
|
client.Redis.Set(context.Background(), fmt.Sprintf("%s:%s", constant.UserToken, userId), token, 7*time.Hour)
|
|
return
|
|
}
|
|
|
|
// ParseToken
|
|
// @description: 解析token
|
|
// @receiver JwtComponent
|
|
// @param token
|
|
// @return *JwtComponent
|
|
// @return error
|
|
func (JwtComponent) ParseToken(token, secret string) (*JwtComponent, error) {
|
|
tokenStr := strings.Split(token, "Bearer ")[1]
|
|
|
|
t, err := jwt.ParseWithClaims(tokenStr, &JwtComponent{}, func(token *jwt.Token) (any, error) {
|
|
return []byte(secret), nil
|
|
})
|
|
|
|
if claims, ok := t.Claims.(*JwtComponent); ok && t.Valid {
|
|
userToken, err := client.Redis.Get(context.Background(), fmt.Sprintf("%s:%s", constant.UserToken, claims.ID)).Result()
|
|
if err != nil {
|
|
log.Errorf("缓存中用户[%s]的token查找失败: %v", claims.ID, err.Error())
|
|
return nil, errors.New("token不存在")
|
|
}
|
|
|
|
if userToken != tokenStr {
|
|
log.Errorf("token不一致")
|
|
return nil, errors.New("token错误")
|
|
}
|
|
|
|
return claims, nil
|
|
} else {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
// Logout
|
|
// @description: 退出登陆
|
|
// @receiver JwtComponent
|
|
// @param userId
|
|
// @return error
|
|
func (JwtComponent) Logout(userId string) error {
|
|
return client.Redis.Del(context.Background(), fmt.Sprintf("%s:%s", constant.UserToken, userId)).Err()
|
|
}
|