fix #52 & add auto refresh token #53

This commit is contained in:
ljw
2024-11-07 10:46:00 +08:00
parent 7c6aaa171e
commit 70a03f1aba
3 changed files with 24 additions and 8 deletions

View File

@@ -17,7 +17,7 @@ func AdminAuth() gin.HandlerFunc {
c.Abort() c.Abort()
return return
} }
user := service.AllService.UserService.InfoByAccessToken(token) user, ut := service.AllService.UserService.InfoByAccessToken(token)
if user.Id == 0 { if user.Id == 0 {
response.Fail(c, 403, "请先登录") response.Fail(c, 403, "请先登录")
c.Abort() c.Abort()
@@ -26,6 +26,8 @@ func AdminAuth() gin.HandlerFunc {
c.Set("curUser", user) c.Set("curUser", user)
c.Set("token", token) c.Set("token", token)
//如果时间小于1天,token自动续期
service.AllService.UserService.AutoRefreshAccessToken(ut)
c.Next() c.Next()
} }

View File

@@ -28,7 +28,7 @@ func RustAuth() gin.HandlerFunc {
//这里只是简单的提取 //这里只是简单的提取
token = token[7:] token = token[7:]
//验证token //验证token
user := service.AllService.UserService.InfoByAccessToken(token) user, ut := service.AllService.UserService.InfoByAccessToken(token)
if user.Id == 0 { if user.Id == 0 {
c.JSON(401, gin.H{ c.JSON(401, gin.H{
"error": "Unauthorized", "error": "Unauthorized",
@@ -46,6 +46,9 @@ func RustAuth() gin.HandlerFunc {
c.Set("curUser", user) c.Set("curUser", user)
c.Set("token", token) c.Set("token", token)
service.AllService.UserService.AutoRefreshAccessToken(ut)
c.Next() c.Next()
} }
} }

View File

@@ -53,18 +53,18 @@ func (us *UserService) InfoByUsernamePassword(username, password string) *model.
} }
// InfoByAccesstoken 根据accesstoken取用户信息 // InfoByAccesstoken 根据accesstoken取用户信息
func (us *UserService) InfoByAccessToken(token string) *model.User { func (us *UserService) InfoByAccessToken(token string) (*model.User, *model.UserToken) {
u := &model.User{} u := &model.User{}
ut := &model.UserToken{} ut := &model.UserToken{}
global.DB.Where("token = ?", token).First(ut) global.DB.Where("token = ?", token).First(ut)
if ut.Id == 0 { if ut.Id == 0 {
return u return u, ut
} }
if ut.ExpiredAt < time.Now().Unix() { if ut.ExpiredAt < time.Now().Unix() {
return u return u, ut
} }
global.DB.Where("id = ?", ut.UserId).First(u) global.DB.Where("id = ?", ut.UserId).First(u)
return u return u, ut
} }
// GenerateToken 生成token // GenerateToken 生成token
@@ -217,8 +217,9 @@ func (us *UserService) Delete(u *model.User) error {
} }
tx.Commit() tx.Commit()
// 删除关联的peer // 删除关联的peer
return AllService.PeerService.EraseUserId(u.Id); err != nil { if err := AllService.PeerService.EraseUserId(u.Id); err != nil {
return errors.New("User deleted successfully, but failed to unlink peer.") global.Logger.Warn("User deleted successfully, but failed to unlink peer.")
return nil
} }
return nil return nil
} }
@@ -447,3 +448,13 @@ func (us *UserService) getAdminUserCount() int64 {
global.DB.Model(&model.User{}).Where("is_admin = ?", true).Count(&count) global.DB.Model(&model.User{}).Where("is_admin = ?", true).Count(&count)
return count return count
} }
func (us *UserService) RefreshAccessToken(ut *model.UserToken) {
ut.ExpiredAt = time.Now().Add(time.Hour * 24 * 7).Unix()
global.DB.Model(ut).Update("expired_at", ut.ExpiredAt)
}
func (us *UserService) AutoRefreshAccessToken(ut *model.UserToken) {
if ut.ExpiredAt-time.Now().Unix() < 86400 {
us.RefreshAccessToken(ut)
}
}