129 lines
3.5 KiB
Go
129 lines
3.5 KiB
Go
/*
|
|
* @desc:中间件
|
|
* @company:云南奇讯科技有限公司
|
|
* @Author: yixiaohu<yxh669@qq.com>
|
|
* @Date: 2022/9/23 15:05
|
|
*/
|
|
|
|
package middleware
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/gogf/gf/v2/frame/g"
|
|
"github.com/gogf/gf/v2/net/ghttp"
|
|
"github.com/gogf/gf/v2/text/gstr"
|
|
"github.com/gogf/gf/v2/util/gconv"
|
|
commonService "github.com/tiger1103/gfast/v3/internal/app/common/service"
|
|
"github.com/tiger1103/gfast/v3/internal/app/system/model"
|
|
"github.com/tiger1103/gfast/v3/internal/app/system/service"
|
|
"github.com/tiger1103/gfast/v3/library/libResponse"
|
|
)
|
|
|
|
func init() {
|
|
service.RegisterMiddleware(New())
|
|
}
|
|
|
|
func New() service.IMiddleware {
|
|
return &sMiddleware{}
|
|
}
|
|
|
|
type sMiddleware struct{}
|
|
|
|
// Ctx 自定义上下文对象
|
|
func (s *sMiddleware) Ctx(r *ghttp.Request) {
|
|
ctx := r.GetCtx()
|
|
// 初始化登录用户信息
|
|
data, err := service.GfToken().ParseToken(r)
|
|
if err != nil {
|
|
// 执行下一步请求逻辑
|
|
r.Middleware.Next()
|
|
}
|
|
if data != nil {
|
|
context := new(model.Context)
|
|
err = gconv.Struct(data.Data, &context.User)
|
|
if err != nil {
|
|
g.Log().Error(ctx, err)
|
|
// 执行下一步请求逻辑
|
|
r.Middleware.Next()
|
|
}
|
|
service.Context().Init(r, context)
|
|
}
|
|
// 执行下一步请求逻辑
|
|
r.Middleware.Next()
|
|
}
|
|
|
|
// Auth 权限判断处理中间件
|
|
func (s *sMiddleware) Auth(r *ghttp.Request) {
|
|
ctx := r.GetCtx()
|
|
//获取登陆用户id
|
|
adminId := service.Context().GetUserId(ctx)
|
|
accessParams := r.Get("accessParams").Strings()
|
|
accessParamsStr := ""
|
|
if len(accessParams) > 0 && accessParams[0] != "undefined" {
|
|
accessParamsStr = "?" + gstr.Join(accessParams, "&")
|
|
}
|
|
url := gstr.TrimLeft(r.Request.URL.Path, "/") + accessParamsStr
|
|
/*if r.Method != "GET" && adminId != 1 && url!="api/v1/system/login" {
|
|
libResponse.FailJson(true, r, "对不起！演示系统，不能删改数据！")
|
|
}*/
|
|
//获取无需验证权限的用户id
|
|
tagSuperAdmin := service.SysUser().IsSupperAdmin(ctx, service.Context().GetUserId(ctx))
|
|
if tagSuperAdmin {
|
|
r.Middleware.Next()
|
|
//不要再往后面执行
|
|
return
|
|
}
|
|
//获取地址对应的菜单id
|
|
menuList, err := service.SysAuthRule().GetMenuList(ctx)
|
|
if err != nil {
|
|
g.Log().Error(ctx, err)
|
|
libResponse.FailJson(true, r, "请求数据失败")
|
|
}
|
|
var menu *model.SysAuthRuleInfoRes
|
|
for _, m := range menuList {
|
|
ms := gstr.SubStr(m.Name, 0, gstr.Pos(m.Name, "?"))
|
|
if m.Name == url || ms == url {
|
|
menu = m
|
|
break
|
|
}
|
|
}
|
|
//只验证存在数据库中的规则
|
|
if menu != nil {
|
|
//若是不登录能访问的接口则不判断权限
|
|
excludePaths := g.Cfg().MustGet(ctx, "gfToken.excludePaths").Strings()
|
|
for _, p := range excludePaths {
|
|
if gstr.Equal(menu.Name, gstr.TrimLeft(p, "/")) {
|
|
r.Middleware.Next()
|
|
return
|
|
}
|
|
}
|
|
//若存在不需要验证的条件则跳过
|
|
if gstr.Equal(menu.Condition, "nocheck") {
|
|
r.Middleware.Next()
|
|
return
|
|
}
|
|
menuId := menu.Id
|
|
//菜单没存数据库不验证权限
|
|
if menuId != 0 {
|
|
//判断权限操作
|
|
enforcer, err := commonService.CasbinEnforcer(ctx)
|
|
if err != nil {
|
|
g.Log().Error(ctx, err)
|
|
libResponse.FailJson(true, r, "获取权限失败")
|
|
}
|
|
hasAccess := false
|
|
hasAccess, err = enforcer.Enforce(fmt.Sprintf("%s%d", service.SysUser().GetCasBinUserPrefix(), adminId), gconv.String(menuId), "All")
|
|
if err != nil {
|
|
g.Log().Error(ctx, err)
|
|
libResponse.FailJson(true, r, "判断权限失败")
|
|
}
|
|
if !hasAccess {
|
|
libResponse.FailJson(true, r, "没有访问权限")
|
|
}
|
|
}
|
|
} else if menu == nil && accessParamsStr != "" {
|
|
libResponse.FailJson(true, r, "没有访问权限")
|
|
}
|
|
r.Middleware.Next()
|
|
}
|