package main import ( "encoding/json" "github.com/beego/beego/v2/client/orm" "github.com/beego/beego/v2/core/logs" beego "github.com/beego/beego/v2/server/web" "github.com/beego/beego/v2/server/web/context" _ "github.com/go-sql-driver/mysql" "log" "regexp" "strings" "time" "yixiang.co/yshop/common" "yixiang.co/yshop/controllers" "yixiang.co/yshop/jwt" "yixiang.co/yshop/models" "yixiang.co/yshop/redis" _ "yixiang.co/yshop/routers" "yixiang.co/yshop/untils" ) const bearerLength = len("Bearer ") func init() { //初始化数据库 dbUser, _ := beego.AppConfig.String("mysqluser") dbPass, _ := beego.AppConfig.String("mysqlpass") dbName, _ := beego.AppConfig.String("mysqldb") dbHost, _ := beego.AppConfig.String("mysqlhost") dbPort, _ := beego.AppConfig.String("mysqlport") maxIdleConn, _ := beego.AppConfig.Int("db_max_idle_conn") maxOpenConn, _ := beego.AppConfig.Int("db_max_open_open") orm.RegisterDriver("mysql", orm.DRMySQL) orm.RegisterDataBase("default","mysql", dbUser+":"+dbPass+"@tcp("+dbHost+":"+dbPort+")/"+dbName+"?charset=utf8&parseTime=true&loc=Asia%2FShanghai", ) orm.MaxIdleConnections(maxIdleConn) orm.MaxOpenConnections(maxOpenConn) orm.DefaultTimeLoc = time.UTC if beego.BConfig.RunMode == "dev" { orm.Debug = true } //日志 logs.Async() level, _ := beego.AppConfig.Int("logLevel") logs.SetLevel(level) logs.SetLogger(logs.AdapterMultiFile, `{"filename":"./logs/yshop.log", "level":6,"maxlines":0,"maxsize":0,"daily":true,"maxdays":30, "separate":["emergency", "alert", "critical", "error", "warning", "notice", "info"]}`) } func main() { log.Print("==========yshop管理后台 start=============") //if beego.BConfig.RunMode == "dev" { beego.BConfig.WebConfig.DirectoryIndex = true beego.BConfig.WebConfig.StaticDir["/swagger"] = "swagger" //} // beego.InsertFilterChain("/*", func(next beego.FilterFunc) beego.FilterFunc { return func(ctx *context.Context) { url := ctx.Input.URL() ignoreUrls, _ := beego.AppConfig.String("ignore_urls") if strings.Contains(ignoreUrls,url) || strings.Contains(url,"/swagger") || strings.Contains(url,"/static") { next(ctx) }else { method := strings.ToLower(ctx.Input.Method()) //部署线上开启 //prohibit := "post,put,delete" //if url != "/admin/auth/logout" && strings.Contains(prohibit,method) { // ctx.Output.JSON(controllers.ErrMsg("演示环境禁止操作",40006), // true,true) // return //} mytoken := ctx.Input.Header("Authorization") if len(mytoken) < bearerLength { ctx.Output.Status = 401 ctx.Output.JSON(controllers.ErrMsg("header Authorization has not Bearer token",40001), true,true) return } token := strings.TrimSpace(mytoken[bearerLength:]) usr, err := jwt.ValidateToken(token) if err != nil { ctx.Output.Status = 401 ctx.Output.JSON(controllers.ErrMsg(err.Error(),40001), true,true) return } //校验权限 index := checkPermission(url,method,token) if index == -1 { ctx.Output.JSON(controllers.ErrMsg("无权限",40001),true,true) return } ctx.Input.SetData(common.ContextKeyUserObj,usr) next(ctx) } } }) beego.Run() } func checkPermission(url string, method string, token string) int { logs.Info(url,method,token,method) //公共路由直接放行 var ignoreUrls = "/admin/menu/build,/admin/user/center,/admin/user/updatePass,/admin/auth/info,/admin/auth/logout" if strings.Contains(ignoreUrls,url) { return 0 } reg := regexp.MustCompile(`[0-9]+`) newUrl := reg.ReplaceAllString(url,"*") permission := models.FindByRouterAndMethod(newUrl,method) var key = common.REDIS_PREFIX_AUTH + token userMap, _:= redis.Get(key) jsonStr := userMap[key] user := &models.SysUser{} json.Unmarshal([]byte(jsonStr),user) index := untils.Contains(user.Permissions,permission) return index }