你用Go写过中间件吗？带你用Gin实现【用户角色权限管理中间件】

package server

import (
	.
	.
	.
	"os"
	"github.com/gin-gonic/gin"
)

// NewRouter 路由配置
func NewRouter() *gin.Engine {
	r := gin.Default()

	// 其他中间件
	.
	.
	.
	// 路由
	v1 := r.Group("/api/v1")
	{
		v1.POST("login", api.Login)
		auth := v1.Group("")
		//登录校验中间件
		auth.Use(middleware.AuthRequired())
		//关键代码：权限角色校验
		auth.Use(middleware.AuthCheckMiddleware)
		{
            .
            .
            .
			// 获取所有学校
			{
				auth.GET("/school/", api.GetSchoolInfo)
			}
			.
			.
			.
		}

	}
	return r
}

package middleware

import (
	.
	.
	.
	"fmt"
	"github.com/gin-gonic/gin"
	"net/http"
	"strings"
)

var AuthCheckMiddleware = authCheck()
func authCheck() gin.HandlerFunc {
	return func(c *gin.Context) {
		if admin, _ := c.Get("admin"); admin != nil {
			method := c.Request.Method
			url := c.Request.URL.Path
			adminInfo := admin.(**service.RunningClaims)
			isSuper := (*adminInfo).IsSuper //是否是超管
			roleId := (*adminInfo).RoleId

			if isSuper != 1 {
				fmt.Println("method:", method)
				fmt.Println("url:", url)
				permissionFunc := strings.ToLower(fmt.Sprintf("%s_%s", method, url))
				haveAuth := model.CheckRolePermission(uint(roleId), permissionFunc)
				fmt.Println("haveAuth  ", haveAuth)
				if !haveAuth {
					c.JSON(http.StatusOK, api.ReturnJson{http.StatusForbidden, "", "无权访问"})
					c.Abort()
				}
			}
			c.Next()
		}
	}
}

//角色部分
type StringArray []string

//角色
type Role struct {
	Id          int          `gorm:"column:id" form:"id" json:"id" comment:"自增id" sql:"int(11),PRI"`
	Name        string       `gorm:"column:name" form:"name" json:"name" comment:"角色名" sql:"varchar(255)"`
	Description string       `gorm:"column:description" form:"description" json:"description" comment:"描述" sql:"varchar(255)"`
	Permission  *StringArray `gorm:"type:json;column:permission" form:"permission" json:"permission" comment:"权限"`
}

func (data *StringArray) Scan(val interface{}) (err error) {
	if val == nil {
		return nil
	}
	if payload, ok := val.([]byte); ok {
		var value []string
		err = json.Unmarshal(payload, &value)
		if err == nil {
			*data = value
		}
	}
	return
}

func CheckRolePermission(roleId uint, permissionFunc string) bool {
	if roleId == 0 {
		return false
	}

	var myRole Role
	err := DB.Where("id = ?", roleId).First(&myRole).Error
	if err != gorm.ErrRecordNotFound {
		fmt.Printf("%v", myRole)
		permissions := myRole.Permission
		permissions.Scan(permissions)
		for _, permission := range *permissions {
			fmt.Println("permissionFunc:", permissionFunc)
			fmt.Println("permission:", permission)
			if strings.HasPrefix(permissionFunc, permission) {
				return true
			}
		}
	}
	return false
}

{
    "code": 403,
    "data": "",
    "message": "无权访问"
}

{
    "code": 200,
    "data": true,
    "message": "更新成功"
}