GolangAPI网关开发 路由聚合与鉴权

func NewReverseProxy(target string) http.HandlerFunc {
    url, _ := url.Parse(target)
    proxy := httputil.NewSingleHostReverseProxy(url)
    
    return func(w http.ResponseWriter, r *http.Request) {
        // 修改请求头，传递原始 Host
        r.Header.Set("X-Forwarded-Host", r.Host)
        r.URL.Host = url.Host
        r.URL.Scheme = url.Scheme
        r.Header.Set("X-Forwarded-For", r.RemoteAddr)

        proxy.ServeHTTP(w, r)
    }
}

router := mux.NewRouter()
router.HandleFunc("/user/{id}", NewReverseProxy("http://user-service:8080")).Methods("GET")
router.HandleFunc("/order/{id}", NewReverseProxy("http://order-service:8080")).Methods("GET")

func AuthMiddleware(next http.HandlerFunc) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        authHeader := r.Header.Get("Authorization")
        if authHeader == "" {
            http.Error(w, "Authorization header required", http.StatusUnauthorized)
            return
        }

        tokenStr := strings.TrimPrefix(authHeader, "Bearer ")
        token, err := jwt.Parse(tokenStr, func(token *jwt.Token) (interface{}, error) {
            return []byte("your-secret-key"), nil // 实际应从配置加载
        })

        if err != nil || !token.Valid {
            http.Error(w, "Invalid token", http.StatusUnauthorized)
            return
        }

        // 可将用户信息注入上下文
        ctx := context.WithValue(r.Context(), "user", token.Claims)
        next.ServeHTTP(w, r.WithContext(ctx))
    }
}

router.HandleFunc("/user/{id}", 
    AuthMiddleware(NewReverseProxy("http://user-service:8080"))).Methods("GET")

router.HandleFunc("/login", LoginHandler).Methods("POST") // 不加 AuthMiddleware