54 lines
1.2 KiB
Go
54 lines
1.2 KiB
Go
package middleware
|
|
|
|
import (
|
|
"github.com/gin-gonic/gin"
|
|
"hy2xs-admin/model/constant"
|
|
"hy2xs-admin/model/vo"
|
|
"hy2xs-admin/service"
|
|
"strings"
|
|
)
|
|
|
|
func JWTHandler() gin.HandlerFunc {
|
|
return func(c *gin.Context) {
|
|
authHeader := c.Request.Header.Get("Authorization")
|
|
if authHeader == "" {
|
|
vo.Fail(constant.UnauthorizedError, c)
|
|
c.Abort()
|
|
return
|
|
}
|
|
parts := strings.SplitN(authHeader, " ", 2)
|
|
if !(len(parts) == 2 && parts[0] == "Bearer") {
|
|
vo.Fail(constant.IllegalTokenError, c)
|
|
c.Abort()
|
|
return
|
|
}
|
|
myClaims, err := service.ParseToken(parts[1])
|
|
if err != nil {
|
|
vo.Fail(err.Error(), c)
|
|
c.Abort()
|
|
return
|
|
}
|
|
admin, err := service.GetAdminForTokenValidation(myClaims.Admin.Id)
|
|
if err != nil {
|
|
vo.Fail(err.Error(), c)
|
|
c.Abort()
|
|
return
|
|
}
|
|
if admin.Status != nil && *admin.Status != 1 {
|
|
vo.Fail("this account has been disabled", c)
|
|
c.Abort()
|
|
return
|
|
}
|
|
tokenVersion := int64(1)
|
|
if admin.TokenVersion != nil && *admin.TokenVersion > 0 {
|
|
tokenVersion = *admin.TokenVersion
|
|
}
|
|
if myClaims.Admin.TokenVersion != tokenVersion {
|
|
vo.Fail(constant.IllegalTokenError, c)
|
|
c.Abort()
|
|
return
|
|
}
|
|
c.Next()
|
|
}
|
|
}
|