114 lines
2.6 KiB
Go
114 lines
2.6 KiB
Go
package admin
|
|
|
|
import (
|
|
"errors"
|
|
"net/http"
|
|
"server/internal/config"
|
|
"server/internal/model/request"
|
|
"server/internal/pkg/errs"
|
|
"server/internal/pkg/httputil"
|
|
"server/internal/router"
|
|
"server/internal/service/admin"
|
|
"time"
|
|
|
|
"github.com/go-chi/chi/v5"
|
|
)
|
|
|
|
type AuthHandler struct {
|
|
authService *admin.AuthService
|
|
cfg *config.Config
|
|
}
|
|
|
|
var _ router.Registrar = (*AuthHandler)(nil)
|
|
|
|
func NewAuthHandler(authService *admin.AuthService, cfg *config.Config) *AuthHandler {
|
|
return &AuthHandler{authService: authService, cfg: cfg}
|
|
}
|
|
|
|
func (h *AuthHandler) Register(r chi.Router) {
|
|
r.Route("/auth", func(r chi.Router) {
|
|
r.Post("/login", h.Login)
|
|
r.Post("/refresh-token", h.RefreshToken)
|
|
r.Post("/logout", h.Logout)
|
|
})
|
|
}
|
|
|
|
func (h *AuthHandler) clearRefreshTokenCookie(w http.ResponseWriter) {
|
|
http.SetCookie(w, &http.Cookie{
|
|
Name: h.cfg.JWTConfig.CookieName,
|
|
Value: "",
|
|
Path: "/",
|
|
HttpOnly: true,
|
|
Secure: true,
|
|
SameSite: http.SameSiteNoneMode,
|
|
MaxAge: -1,
|
|
Expires: time.Unix(0, 0),
|
|
})
|
|
}
|
|
|
|
func (h *AuthHandler) Login(w http.ResponseWriter, r *http.Request) {
|
|
var req request.LoginRequest
|
|
|
|
if err := httputil.BindJson(w, r, &req); err != nil {
|
|
httputil.Fail(w, errs.ErrInvalidCredentials)
|
|
return
|
|
}
|
|
|
|
res, err := h.authService.Login(r.Context(), req)
|
|
if err != nil {
|
|
httputil.Fail(w, err)
|
|
return
|
|
}
|
|
|
|
http.SetCookie(w, &http.Cookie{
|
|
Name: h.cfg.JWTConfig.CookieName,
|
|
Value: res.RefreshToken,
|
|
Path: "/",
|
|
HttpOnly: true,
|
|
Secure: true,
|
|
SameSite: http.SameSiteNoneMode,
|
|
Expires: res.RefreshTokenExp,
|
|
})
|
|
|
|
httputil.Ok(w, map[string]any{
|
|
"access_token": res.AccessToken,
|
|
"access_token_exp": res.AccessTokenExp,
|
|
})
|
|
}
|
|
|
|
func (h *AuthHandler) Logout(w http.ResponseWriter, r *http.Request) {
|
|
cookie, err := r.Cookie(h.cfg.JWTConfig.CookieName)
|
|
if err == nil {
|
|
_ = h.authService.Logout(r.Context(), cookie.Value)
|
|
}
|
|
|
|
h.clearRefreshTokenCookie(w)
|
|
httputil.Ok(w)
|
|
}
|
|
|
|
func (h *AuthHandler) RefreshToken(w http.ResponseWriter, r *http.Request) {
|
|
cookie, err := r.Cookie(h.cfg.JWTConfig.CookieName)
|
|
if err != nil {
|
|
h.clearRefreshTokenCookie(w)
|
|
httputil.Fail(w, errs.ErrInvalidRefreshToken)
|
|
return
|
|
}
|
|
|
|
res, err := h.authService.RefreshToken(r.Context(), cookie.Value)
|
|
if err != nil {
|
|
|
|
if errors.Is(err, errs.ErrInvalidRefreshToken) {
|
|
// 用户被禁用 调用logout
|
|
_ = h.authService.Logout(r.Context(), cookie.Value)
|
|
h.clearRefreshTokenCookie(w)
|
|
}
|
|
httputil.Fail(w, err)
|
|
return
|
|
}
|
|
|
|
httputil.Ok(w, map[string]any{
|
|
"access_token": res.AccessToken,
|
|
"access_token_exp": res.AccessTokenExp,
|
|
})
|
|
}
|