60 lines
1.4 KiB
Go
60 lines
1.4 KiB
Go
|
package middleware
|
||
|
|
|
||
|
|
import (
|
||
|
|
"ai_xhs/common"
|
||
|
|
"ai_xhs/utils"
|
||
|
|
"strings"
|
||
|
|
|
||
|
|
"github.com/gin-gonic/gin"
|
||
|
|
)
|
||
|
|
|
||
|
|
// AuthMiddleware JWT认证中间件
|
||
|
|
func AuthMiddleware() gin.HandlerFunc {
|
||
|
|
return func(c *gin.Context) {
|
||
|
|
// 从请求头获取token
|
||
|
|
authHeader := c.GetHeader("Authorization")
|
||
|
|
if authHeader == "" {
|
||
|
|
common.Error(c, common.CodeUnauthorized, "未登录或token为空")
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// 检查token格式
|
||
|
|
parts := strings.SplitN(authHeader, " ", 2)
|
||
|
|
if !(len(parts) == 2 && parts[0] == "Bearer") {
|
||
|
|
common.Error(c, common.CodeUnauthorized, "token格式错误")
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// 解析token
|
||
|
|
claims, err := utils.ParseToken(parts[1])
|
||
|
|
if err != nil {
|
||
|
|
common.Error(c, common.CodeUnauthorized, "无效的token")
|
||
|
|
c.Abort()
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
// 将员工ID存入上下文
|
||
|
|
c.Set("employee_id", claims.EmployeeID)
|
||
|
|
c.Next()
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// CORS 跨域中间件
|
||
|
|
func CORS() gin.HandlerFunc {
|
||
|
|
return func(c *gin.Context) {
|
||
|
|
c.Writer.Header().Set("Access-Control-Allow-Origin", "*")
|
||
|
|
c.Writer.Header().Set("Access-Control-Allow-Credentials", "true")
|
||
|
|
c.Writer.Header().Set("Access-Control-Allow-Headers", "Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With")
|
||
|
|
c.Writer.Header().Set("Access-Control-Allow-Methods", "POST, OPTIONS, GET, PUT, DELETE, PATCH")
|
||
|
|
|
||
|
|
if c.Request.Method == "OPTIONS" {
|
||
|
|
c.AbortWithStatus(204)
|
||
|
|
return
|
||
|
|
}
|
||
|
|
|
||
|
|
c.Next()
|
||
|
|
}
|
||
|
|
}
|