zishuo/oneterm
1
0
Fork 0
mirror of https://github.com/veops/oneterm.git synced 2025-10-16 20:30:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

term

Browse Source
This commit is contained in:
ttk
2024-08-26 18:55:37 +08:00
parent 96a21f1240
commit 3da6b4cde2
15 changed files with 384 additions and 242 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
backend/api/middleware.go
View File

@@ -1,7 +1,6 @@
package api
import (
"encoding/json"
"net/http"
"time"
@@ -9,7 +8,6 @@ import (
"go.uber.org/zap"
"github.com/veops/oneterm/acl"
"github.com/veops/oneterm/conf"
"github.com/veops/oneterm/logger"
)
@@ -32,29 +30,19 @@ func ginLogger() gin.HandlerFunc {
func auth() gin.HandlerFunc {
return func(ctx *gin.Context) {
session := &acl.Session{}
sess, err := ctx.Cookie("session")
if err != nil || sess == "" {
cookie, err := ctx.Cookie("session")
if err != nil || cookie == "" {
logger.L().Error("cannot get cookie.session", zap.Error(err))
ctx.AbortWithStatus(http.StatusUnauthorized)
return
}
s := acl.NewSignature(conf.Cfg.SecretKey, "cookie-session", "", "hmac", nil, nil)
content, err := s.Unsign(sess)
sess, err := acl.ParseCookie(cookie)
if err != nil {
logger.L().Error("cannot unsign", zap.Error(err))
ctx.AbortWithStatus(http.StatusUnauthorized)
return
}
err = json.Unmarshal(content, &session)
if err != nil {
logger.L().Error("cannot unmarshal to session", zap.Error(err))
ctx.AbortWithStatus(http.StatusUnauthorized)
return
}
ctx.Set("session", session)
ctx.Set("session", sess)
ctx.Next()
}