40 lines
822 B
Go
40 lines
822 B
Go
|
package middleware
|
|||
|
|
|
|||
|
|
import (
|
|||
|
|
"github.com/gin-gonic/gin"
|
|||
|
|
"mc-client-updater-server/internal/service"
|
|||
|
|
"mc-client-updater-server/pkg/result"
|
|||
|
|
"strings"
|
|||
|
|
)
|
|||
|
|
|
|||
|
|
func AdminRequired(c *gin.Context) {
|
|||
|
|
res := result.NewResult(c)
|
|||
|
|
authorization := c.GetHeader("Authorization")
|
|||
|
|
if authorization == "" {
|
|||
|
|
res.Unauthorized()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
split := strings.Split(authorization, " ")
|
|||
|
|
if len(split) <= 1 || (len(split) >= 2 && split[0] != "Bearer") {
|
|||
|
|
res.BadRequest()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
tokenSrv := service.NewTokenService(c)
|
|||
|
|
token := split[1]
|
|||
|
|
tokenRow, ok := tokenSrv.VerifyToken(token)
|
|||
|
|
// 若!ok，则返回值已被service处理，无需再次返回
|
|||
|
|
if !ok {
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
userSrv := service.NewUserService(c)
|
|||
|
|
hasRole := userSrv.JudgeRoleByToken("ROLE_admin", tokenRow)
|
|||
|
|
if !hasRole {
|
|||
|
|
res.NoPermission()
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
c.Next()
|
|||
|
|
}
|