gin 使用 Json Web Token(JWT)

之前的token验证借助了redis，如果用jwt就不需要了

中间件

cat middlewares/jwt.go

package middlewares

import (
    "enterprise-api/app/models"
    "enterprise-api/core"
    "github.com/gin-gonic/gin"
)

func JWTAuth(role string) gin.HandlerFunc {
    return func(c *gin.Context) {
        signToken := c.Request.Header.Get("Authorization")
        roleId, ok := c.Params.Get(role + "_id")
        if signToken == "" || !ok { //未传递user_id
            core.Error(c, 400, "无效的id")
            c.Abort()
            return
        }
        if role == "admin" || (role == "user" && core.ToInt(roleId) > 0) {
            myclaims, err := models.VerifyToken(signToken)
            if err != nil {
                core.Error(c, 401, "token校验失败")
                c.Abort()
                return
            }
            //c.Set("userid", myclaims.Id)
            if myclaims.Id == 0 || myclaims.Id != core.ToInt(roleId) {
                core.Error(c, 401, "token校验失败")
                c.Abort()
                return
            }
        }
        c.Next()
    }
}

生成和校验token的方法

cat models/jwt.go

package models

import (
    "enterprise-api/app/config"
    "github.com/golang-jwt/jwt"
)

type MyCustomClaims struct {
    Id       int    `json:"id"`
    Username string `json:"username"`
    jwt.StandardClaims
}

func CreateToken(claims MyCustomClaims) (string, error) {
    //使用HS256加密方式
    token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
    signToken, err := token.SignedString([]byte(config.GetConfig().JWTKey))
    if err != nil {
        return "", err
    }
    return signToken, nil

}

func VerifyToken(signToken string) (*MyCustomClaims, error) {
    var claims MyCustomClaims
    token, err := jwt.ParseWithClaims(signToken, &claims, func(token *jwt.Token) (interface{}, error) {
        return []byte(config.GetConfig().JWTKey), nil
    })
    if token.Valid {
        return &claims, nil
    } else {
        return nil, err
    }
}

在登陆接口生成token

claims := models.MyCustomClaims{
    Id:       admin.Id,
    Username: admin.Username,
    StandardClaims: jwt.StandardClaims{
        ExpiresAt: time.Now().Add(7 * 24 * time.Hour).Unix(), // 过期时间1星期
        Issuer:    admin.Username,                            // 签发人
    },
}
token, err := models.CreateToken(claims)

在路由中使用

...
userRouter.Use(middlewares.JWTAuth("user"))
{
...
}

参考

https://www.cnblogs.com/liuqingzheng/p/16154825.html