lan
d9aa4b46c3
- Introduce interfaces for all major services (JWT, PostAI, Comment, Message, Notification, QRCodeLogin, Upload, Vote, etc.) to support dependency inversion. - Move query parameters from `internal/dto` to a new `internal/query` package to separate request payloads from data transfer objects. - Refactor `internal/router` to use embedded `RouterDeps` for cleaner dependency management. - Decouple handlers from repositories by injecting services instead of direct repository access, ensuring proper layering. - Improve database initialization by moving it from `internal/model` to `internal/database`. - Optimize message decryption by implementing a more efficient `BatchDecrypt` method in `MessageEncryptor` using a worker pool. - Enhance error handling and security by implementing fail-fast checks for encryption key length during startup. - Clean up unused code, including the `avatar` package and several unused DTOs.
77 lines
1.5 KiB
Go
77 lines
1.5 KiB
Go
package middleware
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"with_you/internal/pkg/response"
|
|
"with_you/internal/service"
|
|
)
|
|
|
|
// Auth 认证中间件
|
|
func Auth(jwtService service.JWTService) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
authHeader := c.GetHeader("Authorization")
|
|
|
|
if authHeader == "" {
|
|
response.Unauthorized(c, "authorization header is required")
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
// 提取Token
|
|
prefix, token, found := strings.Cut(authHeader, " ")
|
|
if !found || prefix != "Bearer" {
|
|
response.Unauthorized(c, "invalid authorization header format")
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
// 验证Token
|
|
claims, err := jwtService.ParseToken(token)
|
|
if err != nil {
|
|
response.Unauthorized(c, "invalid token")
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
// 将用户信息存入上下文
|
|
c.Set("user_id", claims.UserID)
|
|
c.Set("username", claims.Username)
|
|
|
|
c.Next()
|
|
}
|
|
}
|
|
|
|
// OptionalAuth 可选认证中间件
|
|
func OptionalAuth(jwtService service.JWTService) gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
authHeader := c.GetHeader("Authorization")
|
|
if authHeader == "" {
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
// 提取Token
|
|
prefix, token, found := strings.Cut(authHeader, " ")
|
|
if !found || prefix != "Bearer" {
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
// 验证Token
|
|
claims, err := jwtService.ParseToken(token)
|
|
if err != nil {
|
|
c.Next()
|
|
return
|
|
}
|
|
|
|
// 将用户信息存入上下文
|
|
c.Set("user_id", claims.UserID)
|
|
c.Set("username", claims.Username)
|
|
|
|
c.Next()
|
|
}
|
|
}
|