Files
kim.dev.6789 b7f8db7d08 复制项目
2026-01-14 22:35:45 +08:00

146 lines
3.6 KiB
Go

// Copyright © 2023 OpenIM open source community. All rights reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package mw
import (
"strconv"
"git.imall.cloud/openim/chat/pkg/common/constant"
"git.imall.cloud/openim/chat/pkg/protocol/admin"
constantpb "git.imall.cloud/openim/protocol/constant"
"github.com/gin-gonic/gin"
"github.com/openimsdk/tools/apiresp"
"github.com/openimsdk/tools/errs"
)
func New(client admin.AdminClient) *MW {
return &MW{client: client}
}
type MW struct {
client admin.AdminClient
}
func (o *MW) parseToken(c *gin.Context) (string, int32, string, error) {
token := c.GetHeader("token")
if token == "" {
return "", 0, "", errs.ErrArgs.WrapMsg("token is empty")
}
resp, err := o.client.ParseToken(c, &admin.ParseTokenReq{Token: token})
if err != nil {
return "", 0, "", err
}
return resp.UserID, resp.UserType, token, nil
}
func (o *MW) parseTokenType(c *gin.Context, userType int32) (string, string, error) {
userID, t, token, err := o.parseToken(c)
if err != nil {
return "", "", err
}
if t != userType {
return "", "", errs.ErrArgs.WrapMsg("token type error")
}
return userID, token, nil
}
func (o *MW) isValidToken(c *gin.Context, userID string, token string) error {
resp, err := o.client.GetUserToken(c, &admin.GetUserTokenReq{UserID: userID})
if err != nil {
return err
}
if len(resp.TokensMap) == 0 {
return errs.ErrTokenExpired.Wrap()
}
if v, ok := resp.TokensMap[token]; ok {
switch v {
case constantpb.NormalToken:
case constantpb.KickedToken:
return errs.ErrTokenExpired.Wrap()
default:
return errs.ErrTokenUnknown.Wrap()
}
} else {
return errs.ErrTokenExpired.Wrap()
}
return nil
}
func (o *MW) setToken(c *gin.Context, userID string, userType int32) {
SetToken(c, userID, userType)
}
func (o *MW) CheckToken(c *gin.Context) {
userID, userType, token, err := o.parseToken(c)
if err != nil {
c.Abort()
apiresp.GinError(c, err)
return
}
if err := o.isValidToken(c, userID, token); err != nil {
c.Abort()
apiresp.GinError(c, err)
return
}
o.setToken(c, userID, userType)
}
func (o *MW) CheckAdmin(c *gin.Context) {
userID, token, err := o.parseTokenType(c, constant.AdminUser)
if err != nil {
c.Abort()
apiresp.GinError(c, err)
return
}
if err := o.isValidToken(c, userID, token); err != nil {
c.Abort()
apiresp.GinError(c, err)
return
}
o.setToken(c, userID, constant.AdminUser)
}
func (o *MW) CheckUser(c *gin.Context) {
userID, token, err := o.parseTokenType(c, constant.NormalUser)
if err != nil {
c.Abort()
apiresp.GinError(c, err)
return
}
if err := o.isValidToken(c, userID, token); err != nil {
c.Abort()
apiresp.GinError(c, err)
return
}
o.setToken(c, userID, constant.NormalUser)
}
func (o *MW) CheckAdminOrNil(c *gin.Context) {
defer c.Next()
userID, userType, _, err := o.parseToken(c)
if err != nil {
return
}
if userType == constant.AdminUser {
o.setToken(c, userID, constant.AdminUser)
}
}
func SetToken(c *gin.Context, userID string, userType int32) {
c.Set(constant.RpcOpUserID, userID)
c.Set(constant.RpcOpUserType, []string{strconv.Itoa(int(userType))})
c.Set(constant.RpcCustomHeader, []string{constant.RpcOpUserType})
}