首次提交

server/internal/middleware/auth.go

@@ -0,0 +1,72 @@
+ package middleware
+ 
+ import (
+ 	"net/http"
+ 	"strings"
+ 	"time"
+ 
+ 	"github.com/gin-gonic/gin"
+ 	"github.com/golang-jwt/jwt/v5"
+ )
+ 
+ type Claims struct {
+ 	UserID string `json:"userId"`
+ 	jwt.RegisteredClaims
+ }
+ 
+ // GenerateToken 生成 JWT Token（7 天有效期）
+ func GenerateToken(userID, secret string) (string, error) {
+ 	claims := Claims{
+ 		UserID: userID,
+ 		RegisteredClaims: jwt.RegisteredClaims{
+ 			ExpiresAt: jwt.NewNumericDate(time.Now().Add(7 * 24 * time.Hour)),
+ 			IssuedAt:  jwt.NewNumericDate(time.Now()),
+ 		},
+ 	}
+ 	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+ 	return token.SignedString([]byte(secret))
+ }
+ 
+ // AuthRequired JWT 认证中间件（默认所有路由需要认证）
+ func AuthRequired(secret string) gin.HandlerFunc {
+ 	return func(c *gin.Context) {
+ 		authHeader := c.GetHeader("Authorization")
+ 		if authHeader == "" {
+ 			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+ 				"code":    401,
+ 				"message": "缺少认证令牌",
+ 			})
+ 			return
+ 		}
+ 
+ 		tokenStr := strings.TrimPrefix(authHeader, "Bearer ")
+ 		if tokenStr == authHeader {
+ 			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+ 				"code":    401,
+ 				"message": "令牌格式错误",
+ 			})
+ 			return
+ 		}
+ 
+ 		claims := &Claims{}
+ 		token, err := jwt.ParseWithClaims(tokenStr, claims, func(t *jwt.Token) (any, error) {
+ 			return []byte(secret), nil
+ 		})
+ 		if err != nil || !token.Valid {
+ 			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
+ 				"code":    401,
+ 				"message": "令牌无效或已过期",
+ 			})
+ 			return
+ 		}
+ 
+ 		c.Set("userID", claims.UserID)
+ 		c.Next()
+ 	}
+ }
+ 
+ // GetUserID 从上下文中获取当前用户 ID
+ func GetUserID(c *gin.Context) string {
+ 	uid, _ := c.Get("userID")
+ 	return uid.(string)
+ }

server/internal/middleware/cors.go

@@ -0,0 +1,54 @@
+ package middleware
+ 
+ import (
+ 	"net/http"
+ 
+ 	"github.com/gin-contrib/cors"
+ 	"github.com/gin-gonic/gin"
+ )
+ 
+ // CORS 跨域配置
+ func CORS() gin.HandlerFunc {
+ 	return cors.New(cors.Config{
+ 		AllowOrigins:     []string{"*"},
+ 		AllowMethods:     []string{"GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"},
+ 		AllowHeaders:     []string{"Origin", "Content-Type", "Authorization"},
+ 		AllowCredentials: true,
+ 	})
+ }
+ 
+ // ErrorHandler 统一错误处理中间件
+ func ErrorHandler() gin.HandlerFunc {
+ 	return func(c *gin.Context) {
+ 		c.Next()
+ 
+ 		if len(c.Errors) > 0 {
+ 			c.JSON(http.StatusInternalServerError, gin.H{
+ 				"code":    500,
+ 				"message": c.Errors.Last().Error(),
+ 			})
+ 		}
+ 	}
+ }
+ 
+ // ApiResponse 统一响应格式
+ type ApiResponse struct {
+ 	Code    int         `json:"code"`
+ 	Message string      `json:"message"`
+ 	Data    interface{} `json:"data,omitempty"`
+ }
+ 
+ func Success(c *gin.Context, data interface{}) {
+ 	c.JSON(http.StatusOK, ApiResponse{
+ 		Code:    0,
+ 		Message: "ok",
+ 		Data:    data,
+ 	})
+ }
+ 
+ func Error(c *gin.Context, httpStatus int, code int, message string) {
+ 	c.AbortWithStatusJSON(httpStatus, ApiResponse{
+ 		Code:    code,
+ 		Message: message,
+ 	})
+ }