50 lines
1.2 KiB
Go
50 lines
1.2 KiB
Go
|
package middleware
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"github.com/casbin/casbin/v2"
|
|||
|
|
"github.com/duke-git/lancet/v2/convertor"
|
|||
|
|
"github.com/gin-gonic/gin"
|
|||
|
|
"net/http"
|
|||
|
|
v1 "nunu-layout-admin/api/v1"
|
|||
|
|
"nunu-layout-admin/internal/model"
|
|||
|
|
"nunu-layout-admin/pkg/jwt"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
func AuthMiddleware(e *casbin.SyncedEnforcer) gin.HandlerFunc {
|
|||
|
|
return func(ctx *gin.Context) {
|
|||
|
|
// 从上下文获取用户信息（假设通过 JWT 或其他方式设置）
|
|||
|
|
v, exists := ctx.Get("claims")
|
|||
|
|
if !exists {
|
|||
|
|
v1.HandleError(ctx, http.StatusUnauthorized, v1.ErrUnauthorized, nil)
|
|||
|
|
ctx.Abort()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
uid := v.(*jwt.MyCustomClaims).UserId
|
|||
|
|
if convertor.ToString(uid) == model.AdminUserID {
|
|||
|
|
// 防呆设计，超管跳过API权限检查
|
|||
|
|
ctx.Next()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
// 获取请求的资源和操作
|
|||
|
|
sub := convertor.ToString(uid)
|
|||
|
|
obj := model.ApiResourcePrefix + ctx.Request.URL.Path
|
|||
|
|
act := ctx.Request.Method
|
|||
|
|
|
|||
|
|
// 检查权限
|
|||
|
|
allowed, err := e.Enforce(sub, obj, act)
|
|||
|
|
if err != nil {
|
|||
|
|
v1.HandleError(ctx, http.StatusForbidden, v1.ErrForbidden, nil)
|
|||
|
|
ctx.Abort()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
if !allowed {
|
|||
|
|
v1.HandleError(ctx, http.StatusForbidden, v1.ErrForbidden, nil)
|
|||
|
|
ctx.Abort()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
ctx.Next()
|
|||
|
|
}
|
|||
|
|
}
|