57 lines
1.3 KiB
Go
57 lines
1.3 KiB
Go
package server
|
|
|
|
import (
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/dgrijalva/jwt-go"
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/yaoapp/xiang/global"
|
|
)
|
|
|
|
// Guards 服务中间件
|
|
var Guards = map[string]gin.HandlerFunc{
|
|
"bearer-jwt": bearerJWT, // JWT 权限校验
|
|
}
|
|
|
|
// JwtClaims JWT claims
|
|
type JwtClaims struct {
|
|
ID int
|
|
Type string
|
|
Mobile string
|
|
Name string
|
|
jwt.StandardClaims
|
|
}
|
|
|
|
func bearerJWT(c *gin.Context) {
|
|
tokenString := c.Request.Header.Get("Authorization")
|
|
if tokenString == "" {
|
|
c.JSON(403, gin.H{"code": 403, "message": "无权访问该页面"})
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
tokenString = strings.TrimSpace(strings.TrimPrefix(tokenString, "Bearer "))
|
|
token, err := jwt.ParseWithClaims(tokenString, &JwtClaims{}, func(token *jwt.Token) (interface{}, error) {
|
|
return global.Conf.JWT.Secret, nil
|
|
})
|
|
|
|
if err != nil {
|
|
c.JSON(403, gin.H{"code": 403, "message": fmt.Sprintf("登录已过期或令牌失效(%s)", err)})
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
if claims, ok := token.Claims.(*JwtClaims); ok && token.Valid {
|
|
c.Set("id", claims.Subject)
|
|
c.Set("type", claims.Type)
|
|
c.Set("name", claims.Name)
|
|
c.Set("mobile", claims.Mobile)
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
// fmt.Println("bearer-JWT", token.Claims.Valid())
|
|
c.JSON(403, gin.H{"code": 403, "message": "无权访问该页面"})
|
|
c.Abort()
|
|
}
|