提交

internal/middleware/jwt.go

@@ -0,0 +1,102 @@
+package middleware
+
+import (
+	"github.com/gin-gonic/gin"
+	"ripper/internal/response"
+	jwtpkg "ripper/pkg/jwt"
+)
+
+// JWTCheck 检查是否登陆
+// 检查完毕会将jwt结构体写入到Context
+// 适用于同时用于公开与鉴权的路由
+func JWTCheck(c *gin.Context, model jwtpkg.LoadModel, issure ...string) (bool, error) {
+	token := c.Request.Header.Get("Authorization")
+	if token == "" {
+		return false, nil
+	}
+	if len(token) < 8 {
+		return false, nil
+	}
+	token = token[7:]
+	chk, jwter, err := jwtpkg.CheckToken(token, model, "")
+	if err != nil {
+		return false, err
+	}
+	chs := true
+	for _, v := range issure {
+		jwt, err := jwter.GetIssuer()
+		if err != nil {
+			chs = false
+			break
+		}
+		if v != jwt {
+			chs = false
+			break
+		}
+	}
+	if !chs {
+		return false, nil
+	}
+	if !chk {
+		return false, nil
+	}
+	c.Set("token", jwter)
+	c.Next()
+	return true, nil
+}
+
+// JWTAuth 为JWT中间件，客户端下需要在header带上Authorization: Bearer <token>
+// issure 为可选验证签名，支持多参选择
+func JWTAuth(model jwtpkg.LoadModel, issure ...string) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		token := c.Request.Header.Get("Authorization")
+		if token == "" {
+			response.FailJson(c, response.NoAccess, false)
+			c.Abort()
+			return
+		}
+		if len(token) < 8 {
+			response.FailJson(c, response.TokenWrongful, false)
+			c.Abort()
+			return
+		}
+		token = token[7:]
+		chk, jwter, err := jwtpkg.CheckToken(token, model, "")
+		if err != nil {
+			errmsg := response.TokenWrongful
+			errmsg.Msg = "令牌验证错误"
+			response.FailJson(c, errmsg, true, err.Error())
+			c.Abort()
+			return
+		}
+		if !chk {
+			response.FailJson(c, response.NoAccess, true, "破损令牌")
+			c.Abort()
+			return
+		}
+		chs := true
+		issuerStr := ""
+		for _, v := range issure {
+			issuerStr, err = jwter.GetIssuer()
+			if err != nil {
+				chs = false
+				break
+			}
+			if v != issuerStr {
+				chs = false
+				break
+			}
+		}
+		if !chs {
+			errmsg := response.TokenWrongful
+			errmsg.Msg = "签名错误"
+			response.FailJson(c, errmsg, true, err.Error())
+			c.Abort()
+			return
+		}
+		c.Set("token", jwter)
+		c.Set("tokenStr", token)
+		c.Set("token.issuer", issuerStr)
+		c.Next()
+	}
+}