0
0

go实战全家桶优化goweb实现权限控制

GO全家桶

UML

开源

water/goweb

控制端

type IrpcCheckAllowed interface {
// 测试开关、是否检查权限，方便测试可以关闭
IfCheckRes() bool
IfCheckSession() bool

  1. // 根据token获取useid的实现
  2.  RpcUserIdGetBySession(ctx *gin.Context, token string) (*webdto.WebUserId, error)
  4. // RPC 设置ctx上下文的CooUserID信息的实现
  5.  RpcSetUserId(c *gin.Context) //set *webdto.WebUserId
  7. // RPC 获取ctx上下文的CooUserID信息的 实现
  8.  RpcGetUserId(ctx *gin.Context) *webdto.WebUserId
  10. //rpc 检查权限的实现
  11.  RpcCheckAllowed(ctx context.Context, req *webdto.WebCheckRequest) (*webdto.WebCheckResult, error)

}

应用端

  1. // 应用服务上下文获取信息
  2. type IwebCheckAllowed interface {
  3.     SetUserId(c *gin.Context)
  5.     GetUserId(ctx *gin.Context) *webdto.WebUserId
  7.     CheckToken(c *gin.Context) (int, error)
  9.     GetSessionToken(c *gin.Context) (int, *webdto.WebUserId, error)
  11.     WebCheckAllowed(c *gin.Context)
  12. }

内部WEBSERVER无权限控制

  1. /*
  2. @Title    文件名称: main.go
  3. @Description  描述: 有芯通用索引微服务
  4. @Contact.user raymond
  5. @Author  作者: leijianming@163.com  时间(2024-02-18 22:38:21)
  6. @Update  作者: leijianming@163.com  时间(2024-02-18 22:38:21)
  7. */
  8. func InjectMiddleware() {
  10.     // 注册业务权限rpc接口，FindBeanRpcNocheckRight这个不鉴权，鉴权的rpc在general-common业务服务使用
  11.     webcheck.FindBeanWebCheckRight().RegisterIrpc(webcustom.FindBeanRpcNocheckRight())
  12.     // 注入业务中间件(webmiddleware.DemoWebMiddleWare())样例，只是打日志
  13.     //webcheck.FindBeanWebCheckRight().RegisterMiddlewares(handlerfunc.WebExampleMiddleware())
  15. }
  17. // https://www.jianshu.com/p/982c4fabb11d swagg参数
  19. func StartWeb() {
  20.     defer func() {
  21.        if r := recover(); r != nil {
  22.           goutils.Error("[main] Recovered  Error in:", r)
  23.           fmt.Println("[main] Recovered Error in:", r)
  24.           buf := make([]byte, 4096)
  25.           n := runtime.Stack(buf, false)
  26.           fmt.Println(string(buf[:n]))
  27.           goutils.Error(string(buf[:n]))
  29.        }
  30.     }()
  31.     InjectMiddleware()
  33.     goutils.Info("now starting serverNats....")
  34.     goperfstat.FindBeanGoperfStat().SetEnable2Out(false)
  35.     goperfstat.FindBeanGoperfStat().StartStats()
  37.     var config = ichubconfig.FindBeanIchubConfig()
  38.     serverDto := config.ReadIchubWebServer()
  39.     goutils.Info("serverDto=", serverDto)
  40.     var server = webserver.New(serverDto)
  42.     var swagger = config.ReadWebSwagger()
  43.     //注册服务
  44.     goutils.Info("swagger is http://" + swagger.Host + "/swagger/index.html#/")
  45.     fmt.Println("serverName ", serverDto.ServerName)
  47.     server.StartWebSwagger(router.Swagger, router.Register)
  49. }

有权限控制

  1. package webstart
  3. import (
  4.     "fmt"
  5.     "gitee.com/leijmdas/gobase/goconfig/common/golog"
  6.     "gitee.com/leijmdas/gobase/goconfig/common/ichubconfig"
  7.     "gitee.com/leijmdas/goplatform/api/goauth/authproxy"
  8.     "gitee.com/leijmdas/goplatform/web/server/router"
  9.     "gitee.com/leijmdas/goweb/common/webright/webcheck"
  10.     "gitee.com/leijmdas/goweb/common/webright/webmiddleware/handlerfunc"
  11.     "gitee.com/leijmdas/goweb/common/webserver"
  12.     "gitee.com/leijmdas/goweb/domain/service"
  13.     "github.com/sirupsen/logrus"
  14.     "runtime"
  15. )
  17. /*
  18.     @Title    文件名称: websample.go
  19.     @Description  描述: 通用引擎微服务
  20.     @Contact.user raymond
  21.     @Author  作者: leijianming@163.com  时间(2024-02-18 22:38:21)
  22.     @Update  作者: leijianming@163.com  时间(2024-02-18 22:38:21)
  23. */
  25. // https://www.jianshu.com/p/982c4fabb11d swagg参数
  26. func InjectMiddleware() {
  28.     // 注册业务权限rpc接口，FindBeanRpcNocheckRight这个不鉴权，鉴权的rpc在general-common业务服务使用
  29.     //webcheck.FindBeanWebCheckRight().RegisterIrpc(webcustom.FindBeanRpcCheckRight())
  30.     webcheck.FindBeanWebCheckRight().RegisterIrpc(authproxy.FindBeanAuthProxy())
  31.     // 注入业务中间件(webmiddleware.DemoWebMiddleWare())样例，只是打日志
  32.     webcheck.FindBeanWebCheckRight().RegisterMiddlewares(handlerfunc.WebExampleMiddleware())
  34. }
  35. func StartWeb() {
  36.     defer func() {
  37.        if r := recover(); r != nil {
  38.           golog.Error("[main] Recovered  Error in:", r)
  39.           fmt.Println("[main] Recovered Error in:", r)
  40.           buf := make([]byte, 4096)
  41.           n := runtime.Stack(buf, false)
  42.           //fmt.Println(string(buf[:n]))
  43.           golog.Error(string(buf[:n]))
  45.        }
  46.     }()
  47.     InjectMiddleware()
  48.     service.Init()
  50.     var config = ichubconfig.FindBeanIchubConfig()
  51.     serverDto := config.ReadWebServer()
  53.     golog.Info("serverDto=", serverDto)
  54.     var server = webserver.New(serverDto)
  55.     logrus.Info("http://localhost:88/swagger/index.html#/")
  56.     //注册服务
  58.     server.StartWebSwagger(router.Swagger, router.Register)
  60. }
  62. // go get -u -v github.com/swaggo/gin-swagger//go get -u -v github.com/swaggo/files
  63. // go get -u -v github.com/alecthomas/template

控制端实现

  1. package authproxy
  3. import (
  4.     "context"
  5.     "errors"
  6.     "gitee.com/leijmdas/gobase/goconfig/common/base/goutils"
  7.     "gitee.com/leijmdas/gobase/goconfig/common/golog"
  8.     "gitee.com/leijmdas/goplatform/api/goauth"
  9.     "gitee.com/leijmdas/goweb/common/webright/webcheck/webcustom"
  10.     "gitee.com/leijmdas/goweb/common/webright/webconsts"
  11.     "gitee.com/leijmdas/goweb/common/webright/webdto"
  12.     "github.com/gin-gonic/gin"
  13. )
  15. type AuthProxy struct {
  16.     *webcustom.RpcCheckRight
  17. }
  19. func NewAuthProxy() *AuthProxy {
  20.     return &AuthProxy{
  21.        RpcCheckRight: webcustom.NewRpcCheckRight(),
  22.     }
  23. }
  25. func (r AuthProxy) RpcUserIdGetBySession(c *gin.Context, token string) (*webdto.WebUserId, error) {
  26.     var apiUserResult = goauth.FindBeanauthApiService().Auth(token)
  27.     if !apiUserResult.IsSuccess() {
  28.        return nil, errors.New(apiUserResult.Msg)
  29.     }
  31.     var webuser = webdto.NewWebUserId()
  32.     webuser.ApiUserResult = apiUserResult.Data
  33.     return webuser, nil
  34. }
  36. func (r AuthProxy) RpcSetUserId(c *gin.Context) {
  38.     token := c.GetHeader(webconsts.AccessToken)
  39.     if token == "" {
  40.        goutils.Error("toke is empty!")
  41.        return
  42.     }
  43.     var webuser, err = r.RpcUserIdGetBySession(c, token)
  44.     if err != nil {
  45.        golog.Error(err)
  46.        return
  47.     }
  48.     webdto.SetUserId(c, webuser)
  49. }
  51. func (r AuthProxy) RpcGetUserId(c *gin.Context) *webdto.WebUserId {
  53.     return webdto.GetUserId(c)
  54. }
  56. func (r AuthProxy) RpcCheckAllowed(c context.Context, req *webdto.WebCheckRequest) (*webdto.WebCheckResult, error) {
  57.     token := c.(*gin.Context).GetHeader(webconsts.AccessToken)
  58.     if token == "" {
  59.        goutils.Error("toke is empty!")
  60.        return nil, errors.New("token is empty")
  61.     }
  62.     var webuser, err = r.RpcUserIdGetBySession(c.(*gin.Context), token)
  63.     if err != nil {
  64.        golog.Error(err)
  65.        return nil, err
  66.     }
  68.     // 还要增加接口权限 判断url是否有权限
  69.     var result = webdto.NewWebCheckResult()
  70.     result.Allowed = true
  71.     result.ApiUserResult = webuser.ApiUserResult
  73.     return result, nil
  74. }
  76. func (r AuthProxy) IfCheckRes() bool {
  77.     return true
  78. }
  79. func (self *AuthProxy) IfCheckSession() bool {
  80.     return true
  81. }

注入业务中间件

  1. // 注入业务中间件(webmiddleware.DemoWebMiddleWare())样例，只是打日志
  2. webcheck.FindBeanWebCheckRight().RegisterMiddlewares(handlerfunc.WebExampleMiddleware())

  1. func (this *WebRouters) InstallMiddleWare(router *gin.Engine) *gin.Engine {
  2.     router.Use(webmiddlewares.CheckSessionToken(), webmiddlewares.CheckAllowed())
  3.     router.Use(webmiddlewares.WebMiddleware()...)
  4.     //router.Use(gin.)
  5.     router.Use(middleware.RequestID(), middleware.Context(), gin.Recovery(), middleware.Cors())
  6.     //router.Use(gin.Logger(),gindump.Dump())
  7.     router.Use(gzip.Gzip(gzip.DefaultCompression))
  8.     this.AddRouter(router)
  9.     return router
  10. }
标签： golang 开发语言 后端
本文转载自: https://blog.csdn.net/leijmdas/article/details/142329911
版权归原作者 leijmdas 所有， 如有侵权，请联系我们删除。
登录后发布评论

“go实战全家桶优化goweb实现权限控制”的评论:

还没有评论
关于作者
...
overfit同步小助手
文章同步
相关阅读

网络安全法-网络运行安全

使用selenium/drissionpage时如何阻止chrome自动跳转http到https

docker desktop 里部署的Open WebUI 管理员密码忘记了的处理方法

在ubuntu20.04中搭建onsite比赛运行环境

利用开源的低代码表单设计器FcDesigner高效管理和渲染复杂表单结构

Kafka学习笔记

【前端】浏览器输入url到页面呈现发生了什么？

文章导航
没有找到文章内容分段。。。