Golang 框架的认证机制：令牌、Cookie 和会话管理

package main

import (
    "fmt"

    "github.com/dgrijalva/jwt-go"
)

func main() {
    // 生成令牌
    secretKey := []byte("my-secret-key")
    token := jwt.New(jwt.GetSigningMethod("HS256"))
    token.Claims["uid"] = "user123"
    tokenString, err := token.SignedString(secretKey)
    if err != nil {
        fmt.Println(err)
        return
    }

    // 验证令牌
    token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
        // 检查令牌的签名方法
        if _, ok := token.Method.(*jwt.SigningMethodHMAC); !ok {
            return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
        }

        // 验证令牌的签名
        return secretKey, nil
    })
    if err != nil {
        fmt.Println(err)
        return
    }

    // 从令牌中提取声明
    if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
        uid := claims["uid"].(string)
        fmt.Println("用户 ID：", uid)
    } else {
        fmt.Println("令牌无效")
    }
}

package main

import (
    "encoding/base64"
    "fmt"
    "net/http"

    "github.com/gorilla/sessions"
)

func main() {
    store := sessions.NewCookieStore([]byte("my-secret-key"))

    http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
        // 获取当前会话
        session, err := store.Get(r, "user-session")
        if err != nil {
            http.Error(w, http.StatusInternalServerError, err.Error())
            return
        }

        // 检查用户是否已登录
        if _, ok := session.Values["uid"]; ok {
            fmt.Fprintln(w, "您已登录")
        } else {
            // 登录用户
            session.Values["uid"] = "user123"
            session.Save(r, w)
            fmt.Fprintln(w, "您已成功登录")
        }
    })

    http.ListenAndServe(":8080", nil)
}

package main

import (
    "context"
    "fmt"
    "html/template"
    "log"
    "net/http"
    "time"

    "github.com/go-session/session"
)

func main() {
    // 初始化会话管理器
    store := session.NewMemoryStore(120, time.Minute*30)
    manager := &session.Manager{
        Store: store,
    }

    http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
        // 获取会话
        sess, err := manager.Start(w, r)
        if err != nil {
            http.Error(w, http.StatusInternalServerError, err.Error())
            return
        }

        // 检查用户是否已登录
        uid := sess.Get("uid")
        if uid == nil {
            // 登录用户
            sess.Set("uid", "user123")
            sess.Save()
            fmt.Fprintln(w, "您已成功登录")
        } else {
            fmt.Fprintf(w, "您已登录，用户 ID：%s", uid)
        }
    })

    http.ListenAndServe(":8080", nil)
}