深入理解Golang框架的认证与授权机制

import (
    "github.com/gin-gonic/gin"
    "github.com/gin-gonic/gin/binding"
)

type Credentials struct {
    Username string `json:"username" binding:"required"`
    Password string `json:"password" binding:"required"`
}

func main() {
    router := gin.Default()

    // 注册 'user' 组
    router.Use(AuthorizeGroup("user"))

    // 添加认证中间件
    authorized := router.Group("/authorized")
    authorized.Use(Authorize())

    authorized.GET("/secrets", func(c *gin.Context) {
        // 只有授权的用户才能访问此路由
        c.JSON(200, gin.H{"message": "Hello, authorized user!"})
    })

    router.POST("/login", func(c *gin.Context) {
        var credentials Credentials
        if err := c.ShouldBindWith(&credentials, binding.JSON); err != nil {
            c.JSON(400, gin.H{"error": "Invalid credentials"})
            return
        }
        // 验证凭据并生成令牌
        token, err := generateToken(credentials.Username, credentials.Password)
        if err != nil {
            c.JSON(500, gin.H{"error": "Could not generate token"})
            return
        }
        c.JSON(200, gin.H{"token": token})
    })
    
    router.Run()
}

func Authorize() gin.HandlerFunc {
    return func(c *gin.Context) {
        token := c.GetHeader("Authorization")
        // 验证令牌并获取用户身份
        user, err := verifyToken(token)
        if err != nil {
            c.AbortWithStatus(401)
            return
        }
        // 将用户身份存储在上下文对象中
        c.Set("user", user)
        c.Next()
    }
}