backend/internal/middleware/auth.go

package middleware

import (
	"carrotskin/internal/model"
	"net/http"
	"strings"

	"carrotskin/pkg/auth"

	"github.com/gin-gonic/gin"
)

// AuthMiddleware JWT认证中间件（注入JWT服务版本）
func AuthMiddleware(jwtService *auth.JWTService) gin.HandlerFunc {
	return gin.HandlerFunc(func(c *gin.Context) {
		authHeader := c.GetHeader("Authorization")
		if authHeader == "" {
			c.JSON(http.StatusUnauthorized, model.NewErrorResponse(
				model.CodeUnauthorized,
				"缺少Authorization头",
				nil,
			))
			c.Abort()
			return
		}

		// Bearer token格式
		tokenParts := strings.SplitN(authHeader, " ", 2)
		if len(tokenParts) != 2 || tokenParts[0] != "Bearer" {
			c.JSON(http.StatusUnauthorized, model.NewErrorResponse(
				model.CodeUnauthorized,
				"无效的Authorization头格式",
				nil,
			))
			c.Abort()
			return
		}

		token := tokenParts[1]
		claims, err := jwtService.ValidateToken(token)
		if err != nil {
			c.JSON(http.StatusUnauthorized, model.NewErrorResponse(
				model.CodeUnauthorized,
				"无效的token",
				err,
			))
			c.Abort()
			return
		}

		// 将用户信息存储到上下文中
		c.Set("user_id", claims.UserID)
		c.Set("username", claims.Username)
		c.Set("user_role", claims.Role)

		c.Next()
	})
}

// OptionalAuthMiddleware 可选的JWT认证中间件（注入JWT服务版本）
func OptionalAuthMiddleware(jwtService *auth.JWTService) gin.HandlerFunc {
	return gin.HandlerFunc(func(c *gin.Context) {
		authHeader := c.GetHeader("Authorization")
		if authHeader != "" {
			tokenParts := strings.SplitN(authHeader, " ", 2)
			if len(tokenParts) == 2 && tokenParts[0] == "Bearer" {
				token := tokenParts[1]
				claims, err := jwtService.ValidateToken(token)
				if err == nil {
					c.Set("user_id", claims.UserID)
					c.Set("username", claims.Username)
					c.Set("user_role", claims.Role)
				}
			}
		}
		c.Next()
	})
}