109 lines
2.6 KiB
Go
109 lines
2.6 KiB
Go
package handler
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
|
|
"github.com/yourname/cyrene-ai/gateway/internal/config"
|
|
)
|
|
|
|
// AuthHandler 认证处理器
|
|
type AuthHandler struct {
|
|
cfg *config.Config
|
|
}
|
|
|
|
// NewAuthHandler 创建认证处理器
|
|
func NewAuthHandler(cfg *config.Config) *AuthHandler {
|
|
return &AuthHandler{cfg: cfg}
|
|
}
|
|
|
|
// Register 用户注册
|
|
func (h *AuthHandler) Register(c *gin.Context) {
|
|
var req struct {
|
|
Username string `json:"username" binding:"required,min=2,max=32"`
|
|
Password string `json:"password" binding:"required,min=6,max=64"`
|
|
}
|
|
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "请求参数无效: " + err.Error()})
|
|
return
|
|
}
|
|
|
|
// MVP阶段：使用username直接作为userID
|
|
// 后续需要接入用户服务进行真实注册
|
|
userID := "user_" + req.Username
|
|
|
|
// 生成JWT
|
|
token, err := h.cfg.GenerateToken(userID)
|
|
if err != nil {
|
|
c.JSON(http.StatusInternalServerError, gin.H{"error": "生成令牌失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusCreated, gin.H{
|
|
"user_id": userID,
|
|
"token": token,
|
|
"expires": time.Now().Add(h.cfg.JWTExpiryHours).Unix(),
|
|
})
|
|
}
|
|
|
|
// Login 用户登录
|
|
func (h *AuthHandler) Login(c *gin.Context) {
|
|
var req struct {
|
|
Username string `json:"username" binding:"required"`
|
|
Password string `json:"password" binding:"required"`
|
|
}
|
|
|
|
if err := c.ShouldBindJSON(&req); err != nil {
|
|
c.JSON(http.StatusBadRequest, gin.H{"error": "请求参数无效"})
|
|
return
|
|
}
|
|
|
|
// MVP阶段：简化的登录逻辑
|
|
// 后续需要验证密码哈希
|
|
userID := "user_" + req.Username
|
|
|
|
token, err := h.cfg.GenerateToken(userID)
|
|
if err != nil {
|
|
c.JSON(http.StatusInternalServerError, gin.H{"error": "生成令牌失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"user_id": userID,
|
|
"token": token,
|
|
"expires": time.Now().Add(h.cfg.JWTExpiryHours).Unix(),
|
|
})
|
|
}
|
|
|
|
// RefreshToken 刷新令牌
|
|
func (h *AuthHandler) RefreshToken(c *gin.Context) {
|
|
authHeader := c.GetHeader("Authorization")
|
|
if authHeader == "" || len(authHeader) < 8 {
|
|
c.JSON(http.StatusUnauthorized, gin.H{"error": "未提供认证令牌"})
|
|
return
|
|
}
|
|
|
|
tokenString := authHeader[7:] // 去掉 "Bearer "
|
|
userID, err := h.cfg.ValidateToken(tokenString)
|
|
if err != nil {
|
|
// 允许使用已过期但未超过刷新窗口的token
|
|
// MVP简化：直接重新签发
|
|
_ = json.Unmarshal([]byte("{}"), &struct{}{})
|
|
}
|
|
|
|
newToken, err := h.cfg.GenerateToken(userID)
|
|
if err != nil {
|
|
c.JSON(http.StatusInternalServerError, gin.H{"error": "刷新令牌失败"})
|
|
return
|
|
}
|
|
|
|
c.JSON(http.StatusOK, gin.H{
|
|
"token": newToken,
|
|
"expires": time.Now().Add(h.cfg.JWTExpiryHours).Unix(),
|
|
})
|
|
}
|