97 lines
2.2 KiB
Go
97 lines
2.2 KiB
Go
package handler
|
|
|
|
import (
|
|
"net/http"
|
|
"server/internal/config"
|
|
"server/internal/model/request"
|
|
"server/internal/pkg/errs"
|
|
"server/internal/pkg/httputil"
|
|
"server/internal/service"
|
|
"time"
|
|
)
|
|
|
|
type AuthHandler struct {
|
|
authService *service.AuthService
|
|
cfg *config.Config
|
|
}
|
|
|
|
func NewAuthHandler(authService *service.AuthService, cfg *config.Config) *AuthHandler {
|
|
return &AuthHandler{authService: authService, cfg: cfg}
|
|
}
|
|
|
|
func (h *AuthHandler) clearRefreshTokenCookie(w http.ResponseWriter) {
|
|
http.SetCookie(w, &http.Cookie{
|
|
Name: h.cfg.JWTConfig.CookieName,
|
|
Value: "",
|
|
Path: "/",
|
|
HttpOnly: true,
|
|
Secure: true,
|
|
SameSite: http.SameSiteNoneMode,
|
|
MaxAge: -1,
|
|
Expires: time.Unix(0, 0),
|
|
})
|
|
}
|
|
|
|
func (h *AuthHandler) Login(w http.ResponseWriter, r *http.Request) {
|
|
var req request.LoginRequest
|
|
|
|
if err := httputil.BindJson(r, &req); err != nil {
|
|
httputil.Fail(w, errs.ErrInvalidCredentials)
|
|
return
|
|
}
|
|
|
|
res, err := h.authService.Login(r.Context(), req)
|
|
if err != nil {
|
|
httputil.Fail(w, err)
|
|
return
|
|
}
|
|
|
|
http.SetCookie(w, &http.Cookie{
|
|
Name: h.cfg.JWTConfig.CookieName,
|
|
Value: res.RefreshToken,
|
|
Path: "/",
|
|
HttpOnly: true,
|
|
Secure: true,
|
|
SameSite: http.SameSiteNoneMode,
|
|
Expires: res.RefreshTokenExp,
|
|
})
|
|
|
|
httputil.Ok(w, map[string]any{
|
|
"access_token": res.AccessToken,
|
|
"access_token_exp": res.AccessTokenExp,
|
|
})
|
|
}
|
|
|
|
func (h *AuthHandler) Logout(w http.ResponseWriter, r *http.Request) {
|
|
cookie, err := r.Cookie(h.cfg.JWTConfig.CookieName)
|
|
if err == nil {
|
|
_ = h.authService.Logout(r.Context(), cookie.Value)
|
|
}
|
|
|
|
h.clearRefreshTokenCookie(w)
|
|
httputil.Ok(w)
|
|
}
|
|
|
|
func (h *AuthHandler) RefreshToken(w http.ResponseWriter, r *http.Request) {
|
|
cookie, err := r.Cookie(h.cfg.JWTConfig.CookieName)
|
|
if err != nil {
|
|
h.clearRefreshTokenCookie(w)
|
|
httputil.Fail(w, errs.ErrInvalidRefreshToken)
|
|
return
|
|
}
|
|
|
|
res, err := h.authService.RefreshToken(r.Context(), cookie.Value)
|
|
if err != nil {
|
|
// 用户被禁用 调用logout
|
|
_ = h.authService.Logout(r.Context(), cookie.Value)
|
|
h.clearRefreshTokenCookie(w)
|
|
httputil.Fail(w, err)
|
|
return
|
|
}
|
|
|
|
httputil.Ok(w, map[string]any{
|
|
"access_token": res.AccessToken,
|
|
"access_token_exp": res.AccessTokenExp,
|
|
})
|
|
}
|