light-apiengine-feature/utils/auth/light_auth.go

package auth

import (
	"fmt"
	"git.qianqiusoft.com/qianqiusoft/light-apiengine/entitys"
	sysmodel "git.qianqiusoft.com/qianqiusoft/light-apiengine/models"
	sysutils "git.qianqiusoft.com/qianqiusoft/light-apiengine/utils"
	"github.com/xormplus/xorm"
	"net"
	"net/http"
	"strings"
)

type LightAuth struct {
}

var session *xorm.Engine

func init() {
	lightAuth := &LightAuth{}
	RegisterAuth("qianqiusoft.com", lightAuth)
}

func (la *LightAuth) Init() {

}

func (la *LightAuth) Login(c *entitys.CtrlContext) {
	var logininfo sysmodel.LoginInfo
	c.Ctx.BindJSON(&logininfo)
	//fmt.Println(logininfo)
	var user sysmodel.SysUser
	ret, err := c.PlatformDbEngine.SQL(sysmodel.SqlUserLogin, logininfo.Account).Get(&user)
	if ret && err == nil {
		// 输错密码5次，锁定账户10分钟不允许登录
		if !sysutils.GetGlobalLoginCheck().CheckErrNum(user.LoginId) {
			c.Ctx.JSON(200, sysmodel.SysReturn{400, "输错密码5次，锁定账户10分钟!", nil})
			return
		}

		md5Pwd := sysutils.HashPassword(logininfo.Password, "")
		//密码错误
		if !strings.EqualFold(user.Password, md5Pwd) {
			if !sysutils.GetGlobalLoginCheck().AddPwdErrNum(user.LoginId) {
				c.Ctx.JSON(200, sysmodel.SysReturn{400, "输错密码5次，锁定账户10分钟!", nil})
				return
			}
			c.Ctx.JSON(200, sysmodel.SysReturn{400, "password incorrect!", nil})
			return
		}

		//token := &entitys.Token{}
		//timestamp_str := strconv.FormatUint(timestamp, 10)
		//sec_tooken := sysutils.GenerateToken(logininfo.Account + timestamp_str)
		//if v := sysutils.GetGlobalTokenStore().Get(sec_tooken); v == nil {
		//	token.AccessToken = sec_tooken
		//	token.RefreshToken = sec_tooken
		//	token.LoginID = logininfo.Account
		//	token.UserId = user.Id
		//	token.Result = 200
		//	//token.Password = pwd
		//	token.ServerIp = ""
		//	token.Domain = user.Domain
		//	sysutils.GetGlobalTokenStore().Set(sec_tooken, token)
		//	//sysutils.GetGlobalTokenStore().Set(token.LoginID+user.Domain, token)
		//} else {
		//	token = v
		//}
		//// 查找Business对应的用户信息
		//var businessUser sysmodel.SysUser
		//_, err = c.App.GetBusinessDb(user.Domain).Table(new(sysmodel.SysUser)).ID(user.Id).Get(&businessUser)
		//if err != nil {
		//	c.Ctx.JSON(200, sysmodel.SysReturn{400, "business db con't found user!", nil})
		//	return
		//}
		//
		//data := sysmodel.LoginReturnInfo{}
		//data.Id = user.Id
		//data.LoginId = user.LoginId
		//data.Token = token.AccessToken
		//data.Type = user.Type
		//data.Domain = user.Domain
		//data.OrgId = businessUser.OrgId
		//data.Name = businessUser.Name
		//data.Mobile = businessUser.Mobile
		//data.Email = businessUser.Email
		//
		//// 查找用户对应角色
		//var roles []sysmodel.SysRole
		//c.App.GetBusinessDb(user.Domain).SQL("select sys_role.* from sys_user_role, sys_role where sys_user_role.role_id = sys_role.id and sys_role.del_flag = 0 and sys_user_role.user_id = ? order by sys_role.priority asc", user.Id).Find(&roles)
		//data.Roles = roles

		data, err := AddToGlobalTokenStore(c, &user)
		if err != nil {
			c.Ctx.JSON(200, sysmodel.SysReturn{400, err.Error(), nil})
			return
		}
		//登录日志
		if session != nil {
			ip := RemoteIp(c.Ctx.Request)
			sql := "insert into log_sys_login (user_id,account,ip_addr,login_time,del_flag,login_type,user_name) values (?, ?,?,?,?,?,?)"
			_, err = session.Exec(sql, user.Id, user.LoginId, ip, sysmodel.NowLocal().Value(), 0, 0, user.Name)
			if err != nil {
				c.Ctx.JSON(200, sysmodel.SysReturn{400, err.Error(), nil})
				return
			}

		}
		//
		c.Ctx.JSON(200, sysmodel.SysReturn{200, "", data})
	} else {
		//fmt.Println(err.Error())
		c.Ctx.JSON(200, sysmodel.SysReturn{400, "username or password incorrect!", nil})
	}
}

func (la *LightAuth) Logout(c *entitys.CtrlContext) {
	token := c.Ctx.GetHeader("token")
	fmt.Println("delete token: ", token)
	sysutils.GetGlobalTokenStore().Remove(token)
	//登录日志
	tokenStore := sysutils.GetGlobalTokenStore()
	tokenInfo := tokenStore.Get(token)
	user := new(sysmodel.SysUser)
	if session != nil && tokenInfo != nil {
		_, err := c.PlatformDbEngine.Table(user.TableName()).Where("login_id = ?", tokenInfo.LoginID).Get(user)
		if err != nil {
			c.Ctx.JSON(200, sysmodel.SysReturn{400, err.Error(), nil})
			return
		}
		ip := RemoteIp(c.Ctx.Request)
		sql := "insert into log_sys_login (user_id,account,ip_addr,login_time,del_flag,login_type,user_name) values (?, ?,?,?,?,?,?)"
		_, err = session.Exec(sql, user.Id, user.LoginId, ip, sysmodel.NowLocal().Value(), 0, 1, user.Name)
		if err != nil {
			c.Ctx.JSON(200, sysmodel.SysReturn{400, err.Error(), nil})
			return
		}
	}
	//
	c.Ctx.JSON(200, sysmodel.SysReturn{200, "", nil})
}

const (
	XForwardedFor = "X-Forwarded-For"
	XRealIP       = "X-Real-IP"
)

// RemoteIp 返回远程客户端的 IP，如 192.168.1.1
func RemoteIp(req *http.Request) string {
	remoteAddr := req.RemoteAddr
	if ip := req.Header.Get(XRealIP); ip != "" {
		remoteAddr = ip
	} else if ip = req.Header.Get(XForwardedFor); ip != "" {
		remoteAddr = ip
	} else {
		remoteAddr, _, _ = net.SplitHostPort(remoteAddr)
	}
	if remoteAddr == "::1" {
		remoteAddr = "127.0.0.1"
	}
	return remoteAddr
}