如何在Web应用程序中使用C++框架进行身份验证和授权？

conan install bcryptpp/stable
conan install cpprestsdk/stable

#include <cpprest/http_listener.h>
#include <cpprest/json.h>

using namespace web::http;
using namespace web::http::experimental::listener;

int main()
{
  // 模拟用户数据库
  std::map<std::string, std::string> users = {
    {"user1", "password1"},
    {"user2", "password2"}
  };

  // 创建HTTP服务器
  http_listener listener("http://localhost:8080");

  // 设置身份验证中间件
  listener.set_authentication([users](http_request request) {
    basic_credentials credentials;
    extract_basic_credentials(request, credentials);

    auto it = users.find(credentials.username);
    if (it != users.end() && it->second == credentials.password) {
      return true;
    }

    return false;
  });

  // 设置授权中间件，验证用户是否有特定角色
  listener.set_authorization([users](http_request request) {
    if (request.method() == methods::GET) {
      return true;
    }

    // 检查用户是否有"admin"角色
    auto it = users.find(request.basic_credentials().username);
    if (it != users.end() && it->second == "password2") {
      return true;
    }

    return false;
  });

  // 添加受保护的端点
  listener.support(methods::GET, "/protected", [](http_request request) {
    return http_response(status_codes::OK, "Hello, authenticated user!");
  });

  // 启动服务器
  listener.open().wait();

  return 0;
}

#include <cpprest/http_client.h>

int main()
{
  // 创建HTTP客户端
  http_client client("http://localhost:8080");

  // 设置基本身份验证
  client.set_credentials("user1", "password1");

  // 发送GET请求到受保护的端点
  auto response = client.request(methods::GET, "/protected");
  response.wait();

  if (response.status_code() == status_codes::OK) {
    std::string body = response.extract_json().get().serialize();
    std::cout << body << std::endl;
  } else {
    std::cout << "Unauthorized" << std::endl;
  }

  return 0;
}