如何在Golang中实现微服务统一鉴权_Golang微服务统一鉴权实现方法汇总

func AuthMiddleware() gin.HandlerFunc {
    return func(c *gin.Context) {
        tokenString := c.GetHeader("Authorization")
        if tokenString == "" {
            c.JSON(401, gin.H{"error": "未提供Token"})
            c.Abort()
            return
        }

        // 解析JWT
        token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
            return []byte("your-secret-key"), nil
        })
        if err != nil || !token.Valid {
            c.JSON(401, gin.H{"error": "无效或过期的Token"})
            c.Abort()
            return
        }

        // 将用户信息写入上下文
        if claims, ok := token.Claims.(jwt.MapClaims); ok {
            c.Set("userID", claims["id"])
        }

        c.Next()
    }
}

r.Use(AuthMiddleware())
r.GET("/user", userHandler)

func AuthInterceptor(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (interface{}, error) {
    md, ok := metadata.FromIncomingContext(ctx)
    if !ok {
        return nil, status.Errorf(codes.Unauthenticated, "缺失metadata")
    }

    tokens := md["authorization"]
    if len(tokens) == 0 {
        return nil, status.Errorf(codes.Unauthenticated, "未提供Token")
    }

    tokenString := tokens[0]
    // 验证JWT
    token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
        return []byte("your-secret-key"), nil
    })
    if err != nil || !token.Valid {
        return nil, status.Errorf(codes.Unauthenticated, "Token无效")
    }

    // 继续调用实际处理函数
    return handler(ctx, req)
}

s := grpc.NewServer(grpc.UnaryInterceptor(AuthInterceptor))

userID := c.Request.Header.Get("X-User-ID")