Blizzard
609f7d06cf
- pets-fe: 微信原生小程序（首页/计划/记录/报告/社区/引导）， 服务端驱动、无假数据；弹层改用 scroll-view，打开时隐藏自定义 tabBar - pets-be: Gin + GORM(MySQL, sundynix_ 前缀) + MinIO，统一响应/分页， 微信 code2session 登录，provider-neutral AI(DeepSeek)，go:embed React 后台 - 修复：分段选择类型不匹配（字符串 vs 数字）导致选不中 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
75 lines
1.7 KiB
Go
75 lines
1.7 KiB
Go
package jwt
|
|
|
|
import (
|
|
"errors"
|
|
"time"
|
|
|
|
"github.com/golang-jwt/jwt/v5"
|
|
)
|
|
|
|
// Kind 区分令牌主体：小程序用户 / 后台管理员
|
|
type Kind string
|
|
|
|
const (
|
|
KindUser Kind = "user"
|
|
KindAdmin Kind = "admin"
|
|
)
|
|
|
|
// Claims 自定义声明，user 与 admin 复用同一结构，用 Kind 区分
|
|
type Claims struct {
|
|
ID uint `json:"id"`
|
|
Kind Kind `json:"kind"`
|
|
Name string `json:"name"`
|
|
Role string `json:"role,omitempty"`
|
|
jwt.RegisteredClaims
|
|
}
|
|
|
|
// Manager 签发/校验令牌
|
|
type Manager struct {
|
|
secret []byte
|
|
expireHours int
|
|
}
|
|
|
|
func NewManager(secret string, expireHours int) *Manager {
|
|
if expireHours <= 0 {
|
|
expireHours = 168
|
|
}
|
|
return &Manager{secret: []byte(secret), expireHours: expireHours}
|
|
}
|
|
|
|
// Generate 签发令牌
|
|
func (m *Manager) Generate(id uint, kind Kind, name, role string) (string, error) {
|
|
now := time.Now()
|
|
claims := Claims{
|
|
ID: id,
|
|
Kind: kind,
|
|
Name: name,
|
|
Role: role,
|
|
RegisteredClaims: jwt.RegisteredClaims{
|
|
IssuedAt: jwt.NewNumericDate(now),
|
|
ExpiresAt: jwt.NewNumericDate(now.Add(time.Duration(m.expireHours) * time.Hour)),
|
|
Issuer: "pets-be",
|
|
},
|
|
}
|
|
token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
|
|
return token.SignedString(m.secret)
|
|
}
|
|
|
|
// Parse 校验并解析令牌
|
|
func (m *Manager) Parse(tokenStr string) (*Claims, error) {
|
|
token, err := jwt.ParseWithClaims(tokenStr, &Claims{}, func(t *jwt.Token) (any, error) {
|
|
if _, ok := t.Method.(*jwt.SigningMethodHMAC); !ok {
|
|
return nil, errors.New("unexpected signing method")
|
|
}
|
|
return m.secret, nil
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
claims, ok := token.Claims.(*Claims)
|
|
if !ok || !token.Valid {
|
|
return nil, errors.New("invalid token")
|
|
}
|
|
return claims, nil
|
|
}
|