u

code/allapp/allapp-go/api/handler/api.go

@@ -1,12 +1,10 @@
 package handler
 
 import (
-	"allapp/utils/jwtx"
-
 	"github.com/gofiber/fiber/v3"
 )
 
 // Hello handle api status
 func Hello(c fiber.Ctx) error {
-	return c.JSON(fiber.Map{"status": "success", "message": "Hello i'm ok!", "data": nil})
+	panic("测试 panic")
 }

code/allapp/allapp-go/api/handler/auth/index.go

@@ -0,0 +1,231 @@
+package auth
+
+import (
+	"allapp/api/types"
+	"allapp/config"
+	"allapp/db"
+	"allapp/db/repo"
+	"allapp/utils"
+	"allapp/utils/errorx"
+	"allapp/utils/httpx"
+	"allapp/utils/jwtx"
+	"allapp/utils/requestx"
+	"allapp/utils/responsex"
+	"allapp/utils/uniqueid"
+	"errors"
+	"fmt"
+
+	"github.com/gofiber/fiber/v3"
+	"github.com/gofiber/fiber/v3/client"
+)
+
+// LoginQq qq登录
+func LoginQq(c fiber.Ctx) error {
+	dto := new(types.LoginQqDTO)
+	vo := new(types.LoginVO)
+
+	if err := requestx.BindAndValidate(c, dto); err != nil {
+		return err
+	}
+
+	return handleThirdLogin(
+		c,
+		dto.Openid,
+		dto.Nickname,
+		dto.Avatar,
+		1, // QQ
+		vo,
+	)
+}
+
+func LoginWechat(c fiber.Ctx) error {
+	dto := new(types.LoginWeixinDTO)
+	vo := new(types.LoginVO)
+
+	if err := requestx.BindAndValidate(c, dto); err != nil {
+		return err
+	}
+
+	openid, accessToken, err := getWechatAccess(dto.Code)
+	if err != nil {
+		return responsex.Error(c, "微信登录失败，请重试")
+	}
+
+	// 查是否已存在用户
+	_, err = db.Queries.FindUserByOpenID(c.Context(), repo.FindUserByOpenIDParams{
+		Openid: openid,
+		Type:   0,
+	})
+
+	if err == nil {
+		return handleThirdLogin(c, openid, "", "", 0, vo)
+	}
+
+	if !errorx.IsNotFound(err) {
+		return err
+	}
+
+	// 新用户 → 拉用户信息
+	nickname, avatar, err := getWechatUserInfo(accessToken, openid)
+	if err != nil {
+		return responsex.Error(c, "微信登录失败，请重试")
+	}
+
+	return handleThirdLogin(c, openid, nickname, avatar, 0, vo)
+}
+
+func getWechatAccess(code string) (openid string, accessToken string, err error) {
+	bodyData, bodyCode, err := httpx.Get(
+		"https://api.weixin.qq.com/sns/oauth2/access_token",
+		client.Config{
+			Param: map[string]string{
+				"appid":      config.GetConf().Wechat.AppId,
+				"secret":     config.GetConf().Wechat.AppSecret,
+				"code":       code,
+				"grant_type": "authorization_code",
+			},
+		},
+	)
+
+	if err != nil {
+		return "", "", err
+	}
+
+	if bodyCode != 200 {
+		return "", "", fmt.Errorf("微信Http请求失败: %d", bodyCode)
+	}
+
+	accessMap, err := utils.JSONStringToMap(bodyData)
+	if err != nil {
+		return "", "", err
+	}
+
+	accessToken, _ = accessMap["access_token"].(string)
+	openid, _ = accessMap["openid"].(string)
+
+	if accessToken == "" || openid == "" {
+		return "", "", errors.New("获取微信登录凭证失败")
+	}
+
+	return
+}
+
+func getWechatUserInfo(accessToken, openid string) (nickname, avatar string, err error) {
+	bodyData, bodyCode, err := httpx.Get(
+		"https://api.weixin.qq.com/sns/userinfo",
+		client.Config{
+			Param: map[string]string{
+				"access_token": accessToken,
+				"openid":       openid,
+			},
+		},
+	)
+
+	if err != nil {
+		return "", "", err
+	}
+
+	if bodyCode != 200 {
+		return "", "", fmt.Errorf("微信Http请求失败")
+	}
+
+	userMap, err := utils.JSONStringToMap(bodyData)
+	if err != nil {
+		return "", "", err
+	}
+
+	nickname, _ = userMap["nickname"].(string)
+	avatar, _ = userMap["headimgurl"].(string)
+
+	return
+}
+
+func handleThirdLogin(
+	c fiber.Ctx,
+	openid string,
+	nickname string,
+	avatar string,
+	loginType int32, // 0=微信 1=QQ
+	vo *types.LoginVO,
+) error {
+	user, err := db.Queries.FindUserByOpenID(c.Context(), repo.FindUserByOpenIDParams{
+		Openid: openid,
+		Type:   loginType,
+	})
+
+	if err != nil {
+		if errorx.IsNotFound(err) {
+			// 用户不存在 → 注册
+			return registerUser(c, openid, nickname, avatar, loginType, vo)
+		}
+		return err
+	}
+
+	// 用户存在
+	if user.Status == 0 {
+		return responsex.Error(c, "账号已被禁用")
+	}
+
+	_ = db.Queries.UpdateUserLastLoginTime(c.Context(), user.UserID)
+
+	token, err := jwtx.CreateToken(c, user.UserID)
+	if err != nil {
+		return err
+	}
+
+	vo.Token = token
+	vo.UserId = user.UserID
+	vo.Nickname = user.Nickname
+	vo.Avatar = user.Avatar
+
+	return responsex.OK(c, vo)
+}
+
+// 注册用户
+func registerUser(c fiber.Ctx, openid, nickname, avatar string, loginType int32, vo *types.LoginVO) error {
+	userId := uniqueid.NextId()
+
+	if nickname == "" {
+		nickname = fmt.Sprintf("用户_%d", userId)
+	}
+	if avatar == "" {
+		avatar = "https://default-avatar-url.com/default.png"
+	}
+
+	err := db.WithTx(c.Context(), func(q *repo.Queries) error {
+		// 插入用户
+		if err := q.InsertUser(c.Context(), repo.InsertUserParams{
+			ID:       userId,
+			Nickname: nickname,
+			Avatar:   avatar,
+			Status:   1,
+		}); err != nil {
+			return err
+		}
+
+		// 插入第三方登录信息
+		if err := q.InsertUserOAuth(c.Context(), repo.InsertUserOAuthParams{
+			ID:     uniqueid.NextId(),
+			UserID: userId,
+			Type:   loginType,
+			Openid: openid,
+		}); err != nil {
+			return err
+		}
+
+		return nil
+	})
+
+	if err != nil {
+		return err
+	}
+
+	token, _ := jwtx.CreateToken(c, userId)
+
+	vo.Token = token
+	vo.UserId = userId
+	vo.Nickname = nickname
+	vo.Avatar = avatar
+
+	return responsex.OK(c, vo)
+}

code/allapp/allapp-go/api/router/middleware/auth.go

@@ -0,0 +1,47 @@
+package middleware
+
+import (
+	"allapp/utils/jwtx"
+	"allapp/utils/responsex"
+	"strings"
+
+	"github.com/gofiber/fiber/v3"
+)
+
+const CtxUserIDKey = "user_id"
+
+// Auth 登录校验中间件
+func Auth() fiber.Handler {
+	return func(c fiber.Ctx) error {
+
+		token := strings.TrimSpace(c.Get("Token"))
+		if token == "" {
+			return responsex.Unauthorized(c, "未登录")
+		}
+
+		verifyToken, ok := jwtx.VerifyToken(c.Context(), token)
+		if !ok {
+			return responsex.Unauthorized(c, "登录已过期")
+		}
+
+		c.Locals(CtxUserIDKey, verifyToken.UserID)
+
+		return c.Next()
+	}
+}
+
+func GetUserID(c fiber.Ctx) (int64, error) {
+	v := c.Locals(CtxUserIDKey)
+
+	if v == nil {
+		return 0, responsex.Unauthorized(c, "登录已过期")
+	}
+
+	userID, ok := v.(int64)
+
+	if !ok {
+		return 0, responsex.Unauthorized(c, "登录已过期")
+	}
+
+	return userID, nil
+}

code/allapp/allapp-go/api/router/middleware/logger.go

@@ -20,7 +20,7 @@ func Logger() fiber.Handler {
 		duration := time.Since(start)
 
 		// 记录日志
-		log.WithContext(c.Context()).Infow("API Request",
+		log.Infow("API Request",
 			"method", c.Method(),
 			"path", c.Path(),
 			"status", c.Response().StatusCode(),

code/allapp/allapp-go/api/router/middleware/space_guard.go

@@ -0,0 +1,62 @@
+package middleware
+
+import (
+	"allapp/db"
+	"allapp/db/repo"
+	"allapp/utils/errorx"
+	"allapp/utils/redisx"
+	"allapp/utils/responsex"
+	"strconv"
+	"strings"
+
+	"github.com/gofiber/fiber/v3"
+)
+
+const CtxSpaceIDKey = "space_id"
+
+func SpaceGuard() fiber.Handler {
+	return func(c fiber.Ctx) error {
+		userID, err := GetUserID(c)
+
+		if err != nil {
+			return err
+		}
+
+		spaceIDStr := strings.TrimSpace(c.Get("SPACE_ID"))
+
+		spaceID, err := strconv.ParseInt(spaceIDStr, 10, 64)
+		if err != nil || spaceID <= 0 {
+			return responsex.SpaceError(c, "请选择空间")
+		}
+
+		// 校验
+		inSpace, err := redisx.SpaceIsMember(spaceID, userID)
+
+		if inSpace {
+			return c.Next()
+		}
+
+		// 检验空间是否存在
+		space, err := db.Queries.GetSpaceById(c.Context(), spaceID)
+
+		if err != nil {
+			if errorx.IsNotFound(err) {
+				// 未找到
+				return responsex.SpaceError(c, "空间已失效")
+			}
+			return err
+		}
+
+		// 空间有效，判断是否在该空间内
+		role, err := db.Queries.GetUserSpaceRole(c.Context(), repo.GetUserSpaceRoleParams{
+			SpaceID: spaceID,
+			UserID:  spaceID,
+		})
+		if err != nil {
+			if errorx.IsNotFound(err) {
+
+			}
+		}
+
+	}
+}

code/allapp/allapp-go/api/router/router.go

@@ -1,7 +1,7 @@
 package router
 
 import (
-	"allapp/api/handler"
+	"allapp/api/handler/auth"
 	"allapp/config"
 
 	"github.com/gofiber/fiber/v3"
@@ -10,5 +10,13 @@ import (
 func SetupRouters(app *fiber.App) {
 	api := app.Group(config.GetConf().Server.BaseUrl)
 
-	api.Get("/", handler.Hello)
+	public := api.Group("")
+	//private := api.Group("", middleware.Auth())
+
+	// auth
+	authRouter := public.Group("/auth")
+	authRouter.Post("/login/qq", auth.LoginQq)
+	authRouter.Post("/login/wechat", auth.LoginWechat)
+
+	// 其他的都带中间件
 }

code/allapp/allapp-go/api/types/auth.go

@@ -0,0 +1,18 @@
+package types
+
+type LoginQqDTO struct {
+	Openid   string `json:"openid" validate:"required"`
+	Nickname string `json:"nickname"`
+	Avatar   string `json:"avatar"`
+}
+
+type LoginWeixinDTO struct {
+	Code string `json:"code" validate:"required"`
+}
+
+type LoginVO struct {
+	Token    string `json:"token"`
+	UserId   int64  `json:"userId"`
+	Nickname string `json:"nickname"`
+	Avatar   string `json:"avatar"`
+}