Golang 框架中API 安全性的端到端指南

package main

import (
    "encoding/json"
    "fmt"
    "net/http"
)

type User struct {
    Username string `json:"username"`
    Password string `json:"password"`
}

func main() {
    mux := http.NewServeMux()

    // 路由用于创建新的用户
    mux.HandleFunc("/user", func(w http.ResponseWriter, r *http.Request) {
        // 解析请求正文到一个 User 结构体
        var user User
        if err := json.NewDecoder(r.Body).Decode(&user); err != nil {
            http.Error(w, "Invalid request body", http.StatusBadRequest)
            return
        }

        // 对用户密码进行哈希处理并存储在数据库中
        hashedPassword, err := HashPassword(user.Password)
        if err != nil {
            http.Error(w, "Could not hash password", http.StatusInternalServerError)
            return
        }

        // 创建新的用户并写入数据库
        newUser, err := CreateUser(user.Username, hashedPassword)
        if err != nil {
            http.Error(w, "Could not create user", http.StatusInternalServerError)
            return
        }

        // 返回新用户 ID
        json.NewEncoder(w).Encode(newUser.ID)
    })

    // 设置服务器并监听端口
    server := &http.Server{
        Addr:    ":8080",
        Handler: mux,
    }
    server.ListenAndServe()
}