【Golang】Golang + jwt 实现简易用户认证

import ( "fmt" "github.com/glorinli/go-jwt-simple-auth/app" "github.com/glorinli/go-jwt-simple-auth/controllers" "log" "net/http" "os"

"github.com/gorilla/mux"

)

func init() { log.SetPrefix("simple-auth") }

func main() { // 新建路由器 router := mux.NewRouter()

1// 注册jwt认证的中间件
2router.Use(app.JwtAuthentication)
3
4// 注册路由
5router.HandleFunc("/api/account", controllers.CreateUser).Methods(http.MethodPost)
6router.HandleFunc("/api/account/accesstoken", controllers.Login).Methods(http.MethodGet)
7router.HandleFunc("/api/account/me", controllers.Me).Methods(http.MethodGet)
8
9// 获取端口号
10port := os.Getenv("golang-jwt-simple-auth-port")
11if port == "" {
12    port = "8001"
13}
14
15fmt.Println("Port is:", port)
16
17// 开始服务
18err := http.ListenAndServe(":"+port, router)
19if err != nil {
20    fmt.Print("Fail to start server", err)
21}

}

</code></pre>

import ( ... 省略 )

var JwtAuthentication = func(next http.Handler) http.Handler { return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {

1    // 只针对这个me接口开启认证
2    needAuthPaths := []string{"/api/account/me"}
3    requestPath := r.URL.Path
4
5    var needAuth = false
6    // 判断是否是需要认证的api，省略
7
8    // 不需要认证，直接走下一步
9    if !needAuth {
10        next.ServeHTTP(w, r)
11        return
12    }
13
14    // 从Header读取Token
15    tokenHeader := r.Header.Get("Authorization")
16
17    // Token is missing
18    if tokenHeader == "" {
19        sendInvalidTokenResponse(w, "Missing auth token")
20        return
21    }
22
23    tk := &models.Token{}
24
25    token, err := jwt.ParseWithClaims(tokenHeader, tk, func(token *jwt.Token) (interface{}, error) {
26        return []byte(os.Getenv("token_password")), nil
27    })
28
29    fmt.Println("Parse token error:", err)
30
31    if err != nil {
32        sendInvalidTokenResponse(w, "Invalid auth token: "+err.Error())
33        return
34    }
35
36    // Token is invalid
37    if !token.Valid {
38        sendInvalidTokenResponse(w, "Token is not valid")
39        return
40    }
41
42    // Auth ok
43    fmt.Println("User:", tk.UserId)
44    ctx := context.WithValue(r.Context(), "user", tk.UserId)
45    r = r.WithContext(ctx)
46    next.ServeHTTP(w, r)
47})

}

func sendInvalidTokenResponse(w http.ResponseWriter, message string) { response := u.Message(false, message) w.WriteHeader(http.StatusForbidden) w.Header().Set("Content-Type", "application/json") u.Respond(w, response) }

</code></pre>

1err := json.NewDecoder(r.Body).Decode(account)
2
3if err != nil {
4    utils.Respond(w, utils.Message(false, "Invalid info: "+err.Error()))
5    return
6}
7
8utils.Respond(w, account.Create())

} </code></pre>

1// 将密码做一个加密
2hashedPassword, _ := bcrypt.GenerateFromPassword([]byte(account.Password), bcrypt.DefaultCost)
3account.Password = string(hashedPassword)
4
5// 创建数据库数据
6err := GetDB().Create(account).Error
7
8// ...
9
10// 创建Token
11tk := &Token{UserId: account.ID}
12token := jwt.NewWithClaims(jwt.GetSigningMethod("HS256"), tk)
13tokenString, _ := token.SignedString([]byte(os.Getenv("token_password")))
14account.Token = tokenString
15
16account.Password = ""
17response := u.MessageWithData(true, "Account has been created", account)
18return response

} </code></pre>