You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 

130 lines
4.0 KiB

package main
import (
"encoding/json"
"github.com/beego/beego/v2/client/orm"
"github.com/beego/beego/v2/core/logs"
beego "github.com/beego/beego/v2/server/web"
"github.com/beego/beego/v2/server/web/context"
_ "github.com/go-sql-driver/mysql"
"log"
"regexp"
"strings"
"time"
"yixiang.co/yshop/common"
"yixiang.co/yshop/controllers"
"yixiang.co/yshop/jwt"
"yixiang.co/yshop/models"
"yixiang.co/yshop/redis"
_ "yixiang.co/yshop/routers"
"yixiang.co/yshop/untils"
)
const bearerLength = len("Bearer ")
func init() {
//初始化数据库
dbUser, _ := beego.AppConfig.String("mysqluser")
dbPass, _ := beego.AppConfig.String("mysqlpass")
dbName, _ := beego.AppConfig.String("mysqldb")
dbHost, _ := beego.AppConfig.String("mysqlhost")
dbPort, _ := beego.AppConfig.String("mysqlport")
maxIdleConn, _ := beego.AppConfig.Int("db_max_idle_conn")
maxOpenConn, _ := beego.AppConfig.Int("db_max_open_open")
orm.RegisterDriver("mysql", orm.DRMySQL)
orm.RegisterDataBase("default", "mysql",
dbUser+":"+dbPass+"@tcp("+dbHost+":"+dbPort+")/"+dbName+"?charset=utf8&parseTime=true&loc=Asia%2FShanghai",
)
orm.MaxIdleConnections(maxIdleConn)
orm.MaxOpenConnections(maxOpenConn)
orm.DefaultTimeLoc = time.UTC
if beego.BConfig.RunMode == "dev" {
orm.Debug = true
}
//日志
logs.Async()
level, _ := beego.AppConfig.Int("logLevel")
logs.SetLevel(level)
logs.SetLogger(logs.AdapterMultiFile, `{"filename":"./logs/yshop.log",
"level":6,"maxlines":0,"maxsize":0,"daily":true,"maxdays":30,
"separate":["emergency", "alert", "critical", "error", "warning", "notice", "info"]}`)
}
func main() {
log.Print("==========yshop管理后台 start=============")
if beego.BConfig.RunMode == "dev" {
beego.BConfig.WebConfig.DirectoryIndex = true
beego.BConfig.WebConfig.StaticDir["/swagger"] = "swagger"
}
//
beego.InsertFilterChain("/*", func(next beego.FilterFunc) beego.FilterFunc {
return func(ctx *context.Context) {
url := ctx.Input.URL()
ignoreUrls, _ := beego.AppConfig.String("ignore_urls")
if strings.Contains(ignoreUrls, url) || strings.Contains(url, "/swagger") || strings.Contains(url, "/static") {
next(ctx)
} else {
//method := strings.ToLower(ctx.Input.Method())
//部署线上开启 = 验证请求类型,避免线上请求非发类型,导致系统异常
//prohibit := "post,put,delete"
//if url != "/admin/auth/logout" && strings.Contains(prohibit,method) {
// ctx.Output.JSON(controllers.ErrMsg("演示环境禁止操作",40006),
// true,true)
// return
//}
mytoken := ctx.Input.Header("Authorization")
if len(mytoken) < bearerLength {
ctx.Output.Status = 401
ctx.Output.JSON(controllers.ErrMsg("header Authorization has not Bearer token", 40001),
true, true)
return
}
token := strings.TrimSpace(mytoken[bearerLength:])
usr, err := jwt.ValidateToken(token)
if err != nil {
ctx.Output.Status = 401
ctx.Output.JSON(controllers.ErrMsg(err.Error(), 40001),
true, true)
return
}
//校验权限 = 验证权限部分,不推荐打开,否则基本功能无法实现
//index := checkPermission(url, method, token)
//if index == -1 {
// ctx.Output.JSON(controllers.ErrMsg("无权限", 40001), true, true)
// return
//}
ctx.Input.SetData(common.ContextKeyUserObj, usr)
next(ctx)
}
}
})
beego.Run()
}
// checkPermission 验证请求权限情况
func checkPermission(url string, method string, token string) int {
logs.Info(url, method, token, method)
//公共路由直接放行
var ignoreUrls = "/admin/menu/build,/admin/user/center,/admin/user/updatePass,/admin/auth/info,/admin/auth/logout"
if strings.Contains(ignoreUrls, url) {
return 0
}
reg := regexp.MustCompile(`[0-9]+`)
newUrl := reg.ReplaceAllString(url, "*")
permission := models.FindByRouterAndMethod(newUrl, method)
var key = common.REDIS_PREFIX_AUTH + token
userMap, _ := redis.Get(key)
jsonStr := userMap[key]
user := &models.SysUser{}
json.Unmarshal([]byte(jsonStr), user)
index := untils.Contains(user.Permissions, permission)
return index
}