76 lines
1.6 KiB
Go
76 lines
1.6 KiB
Go
package middleware
|
|
|
|
import (
|
|
"base-framework/pkg/config"
|
|
"base-framework/pkg/router"
|
|
"base-framework/pkg/utils/jwt"
|
|
"base-framework/pkg/utils/response"
|
|
"errors"
|
|
"log"
|
|
"strings"
|
|
)
|
|
|
|
func Auth() router.HandlerFunc {
|
|
return func(c *router.Context) {
|
|
log.Println("[Auth] 开始鉴权")
|
|
|
|
tokenHeader := c.Header("Authorization")
|
|
userIdHeader := c.Header("userId")
|
|
orgIDHeader := c.Header("orgId")
|
|
|
|
// 缺少登录信息
|
|
if tokenHeader == "" || userIdHeader == "" || orgIDHeader == "" {
|
|
response.Error(c).Code(response.CodeNoLogin).Send()
|
|
return
|
|
}
|
|
|
|
// Bearer token 格式校验
|
|
parts := strings.Fields(tokenHeader)
|
|
if len(parts) != 2 || strings.ToLower(parts[0]) != "bearer" {
|
|
response.Error(c).Code(response.CodeInvalidToken).Send()
|
|
return
|
|
}
|
|
|
|
// 解析 token
|
|
tokenStr := parts[1]
|
|
claims, err := jwt.VerifyToken(tokenStr)
|
|
if err != nil {
|
|
switch {
|
|
case errors.Is(err, jwt.ErrTokenExpired):
|
|
response.Error(c).Code(response.CodeLoginExpired).Send()
|
|
default:
|
|
response.Error(c).Code(response.CodeInvalidToken).Send()
|
|
}
|
|
return
|
|
}
|
|
|
|
// user_id 校验
|
|
if claims.UserID != userIdHeader {
|
|
response.Error(c).Code(response.CodeInvalidToken).Send()
|
|
return
|
|
}
|
|
|
|
// org_id 校验
|
|
if claims.OrgID != orgIDHeader {
|
|
response.Error(c).Code(response.CodeInvalidToken).Send()
|
|
return
|
|
}
|
|
|
|
// 检查是否有该机构号
|
|
hasOrg := false
|
|
for k := range config.GetDBConfigs() {
|
|
if k == orgIDHeader {
|
|
hasOrg = true
|
|
break
|
|
}
|
|
}
|
|
|
|
if !hasOrg {
|
|
response.Error(c).Code(response.CodeInvalidOrgCode).Send()
|
|
return
|
|
}
|
|
|
|
c.Next()
|
|
}
|
|
}
|