【Golang 1.19】Go! Go! 購物趣! 我是VIP

package main

import "william/model"

const (
	AutoUpdate              bool   = true
	ValidityDays            int    = 14
	SqliteDatabasePath      string = "./material/database.sqlite3"
	AutoUpdateCronRule      string = "*/1 * * * *"
	AutoRemoveTokenCronRule string = "*/60 * * * *"
	Port                    string = ":12345"
	Sheet                   string = "App版本相關訊息"
	AuthorizationKey        string = "Authorization"
)

const (
	UserMinimumLength     int = 8
	PasswordMinimumLength int = 8
)

var (
	// 預先設定的帳號
	SuperUsers = map[string]map[string]model.UserLevel{
		"root":    {"3939889": model.Root},
		"admin":   {"28825252": model.Admin},
		"william": {"987987": model.Account},
	}

	// API的通行規則
	ApiRules = map[model.UserLevel]map[string][]string{
		model.Account: {
			"GET":  {"/appVersion/:id"},
			"POST": {"/checkToken", "/versionList/:page", "/saveAppVersion", "/forceUpdate"},
		},
		model.Admin: {"GET": {"*"}, "POST": {"*"}, "PUT": {"*"}, "PATCH": {"*"}},
		model.Root:  {"GET": {"*"}, "POST": {"*"}, "PUT": {"*"}, "PATCH": {"*"}, "DELETE": {"*"}},
	}
)

type UserLevel uint

const (
	Account UserLevel = 0
	Admin   UserLevel = 9
	Root    UserLevel = 99
)

const (
	UsernameMinimumLength int = 8
	PasswordMinimumLength int = 8
)

type User struct {
	gorm.Model
	Username string    `json:"username" gorm:"index:idx_username,unique"`
	Password string    `json:"password"`
	Level    UserLevel `json:"level"`
}

GET /private/index.html HTTP/1.0
Host: localhost
Authorization: Basic V2lsbGlhbTk4Nzk4Nw==

HTTP/1.0 200 OK
Server: HTTPd/1.0
Date: Sat, 27 Nov 2022 10:19:07 GMT
Content-Type: text/html
Content-Length: 87

GET /private/index.html HTTP/1.0
Host: localhost
Authorization: Bearer eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWUsImlhdCI6MTUxNjIzOTAyMn0.VFb0qJ1LRg_4ujbZoRMXnVkUgiuKq5KxWqNdbKq_G9Vvz-S1zZa9LPxtHWKa64zDl2ofkT8F6jBt_K4riU-fPg

HTTP/1.0 200 OK
Server: HTTPd/1.0
Date: Sat, 27 Nov 2022 10:19:07 GMT
Content-Type: text/html
Content-Length: 87

package model

import (
	"errors"
	"fmt"
	"net/url"
	"regexp"
	"time"

	"github.com/golang-jwt/jwt/v4"
	"gorm.io/gorm"
)

// 紀錄Token
type AuthToken struct {
	gorm.Model
	Username    string    `json:"username"`
	Token       string    `json:"token" gorm:"index:idx_token,unique"`
	ExpiresTime time.Time `json:"expiresTime"`
}

func (_authToken *AuthToken) CheckToken(database *gorm.DB, token string) (map[string]interface{}, error) {

	authToken := _authToken.Select(database, token)

	if authToken.ID == 0 {
		return nil, errors.New("token is null")
	}

	result, error := _authToken.validateToken(token)
	return result, error
}

func (_authToken *AuthToken) JwtToken(user User, expiresTime time.Time) (*string, error) {

	claims := jwt.RegisteredClaims{
		Subject:   user.Username,
		ExpiresAt: jwt.NewNumericDate(expiresTime),
	}

	authClaims := authClaims{
		RegisteredClaims: claims,
		UserID:           user.ID,
		Level:            user.Level,
	}

	token := jwt.NewWithClaims(jwt.SigningMethodHS512, authClaims)
	tokenString, error := token.SignedString(jwtKey)

	if error != nil {
		return nil, error
	}

	return &tokenString, nil
}

func (_authToken *AuthToken) validateToken(jwtToken string) (map[string]interface{}, error) {

	var claims authClaims

	result := map[string]interface{}{
		"id":       0,
		"username": nil,
		"level":    Account,
	}

	token, error := jwt.ParseWithClaims(jwtToken, &claims, func(token *jwt.Token) (interface{}, error) {

		_, isSuccess := token.Method.(*jwt.SigningMethodHMAC)

		if !isSuccess {
			return nil, fmt.Errorf("unexpected signing method: %v", token.Header["alg"])
		}

		return jwtKey, nil
	})

	if error != nil {
		return result, error
	}

	if !token.Valid {
		return result, errors.New("invalid token")
	}

	result = map[string]interface{}{
		"id":          claims.UserID,
		"username":    claims.Subject,
		"level":       claims.Level,
		"expiresTime": claims.ExpiresAt.Time,
	}

	return result, nil
}

export default defineComponent({
  name: 'App',
  components: {},
  setup() {

	const API = {

      // 使用者登入
      userLogin: async (username: string, password: string) => {
        
        const url = Constant.GolangAPI.userLogin()
        const response = await axios.post(url, {
          "username": username,
          "password": password,
        })

        const { result } = response.data
        return result
      },
	}

	const Utility = {

	  // 使用者登入
      userLogin: () => {

        const username = Utility.tempUser.value.username
        const password = Utility.tempUser.value.password

        API.userLogin(username, password).then((result) => {

          if (result.token === undefined) {
            Utility.tips("登入失敗", "error")
            Utility.clearTemporary(); return 
          }

          localStorage.setItem(API.AuthorizationKey, `Bearer ${result.token}`)
        })
      },
	}
  }

export default defineComponent({
  name: 'App',
  components: {},
  setup() {

	const API = {
      
	  // 取得記在localStorage的token
      authToken: () => {
        return localStorage.getItem(API.AuthorizationKey)
      },

      // 加上認證的headers
      authorizationHeaders: () => {
        const headers = { "Authorization": API.authToken() ?? "" }
        return headers
      },

	  // 取得App版本列表
      appVersions: async (page: number) => {

        const parameters = {
          limit: Constant.PaginationSetting.value.pageSize,
          offset: (page - 1) * Constant.PaginationSetting.value.pageSize,
        }

        const authAPI = axios.create({ headers: API.authorizationHeaders() })
        const url = Constant.GolangAPI.appVersionList(Constant.PaginationSetting.value.currentPage)          

        try {
          const response = await authAPI.post(url, parameters)
          if (response.status === 401) { Utility.tips("尚未授權", "error"); return }

          const { result } = response.data
          return result

        } catch (error: any) {
          if (error.response.status === 401) { Utility.tips("尚未授權", "error"); return }
        }
      },
	}
  }

// 註冊API
func registerWebAPI(router *gin.Engine, database *gorm.DB) {

	initAdminUser(database)
	checkToken(router, database)
	selectAppVersion(router, database)
	selectAppVersionMini(router, database)
	userLogin(router, database)
	cronSchedule(database)

	router.Use(checkTokenMiddleware)

	checkAppVersion(router)
	insertAppVersion(router, database)
	selectAppVersionList(router, database)
	updateAppVersion(router, database)
	deleteAppVersion(router, database)
	saveAppVersions(router, database)
	uploadAppVersions(router, database)
	forceUpdateVersions(router, database)
	updateVersionType(router, database)

	insertUser(router, database)
	selectUser(router, database)

	authToken(router, database)
}

// 中間件 (卡在中間擋路的) => 測試是否登入？沒有沒Token
func checkTokenMiddleware(context *gin.Context) {

	var authToken model.AuthToken

	token := phaseAuthorizationToken(context)
	result, error := authToken.CheckToken(gormDatabase, token)
	level := result["level"]

	if error != nil || level == nil {
		utility.AbortWithStatusJSON(context, http.StatusUnauthorized, result, error)
		return
	}

	isMatch := authToken.CheckLevel(level.(model.UserLevel), context.Request.URL, context.Request.Method, ApiRules)

	if !isMatch {
		utility.AbortWithStatusJSON(context, http.StatusUnauthorized, result, error)
		return
	}

	context.Next()
}

var (
	// API的通行規則
	ApiRules = map[model.UserLevel]map[string][]string{
		model.Account: {
			"GET":  {"/appVersion/:id"},
			"POST": {"/checkToken", "/versionList/:page", "/saveAppVersion", "/forceUpdate"},
		},
		model.Admin: {"GET": {"*"}, "POST": {"*"}, "PUT": {"*"}, "PATCH": {"*"}},
		model.Root:  {"GET": {"*"}, "POST": {"*"}, "PUT": {"*"}, "PATCH": {"*"}, "DELETE": {"*"}},
	}
)

func (_authToken *AuthToken) CheckLevel(level UserLevel, url *url.URL, method string, rules map[UserLevel]map[string][]string) bool {

	isMatch := false
	urlString := url.String()

	urls := rules[level][method]

	for _, _url := range urls {

		if _url == "*" {
			isMatch = true
			return isMatch
		}

		rule := `:[\w]+`
		regular := regexp.MustCompile(rule)
		newRule := regular.ReplaceAllString(_url, `[\w]+`)

		regular = regexp.MustCompile(newRule)
		isMatch = regular.MatchString(urlString)

		if isMatch {
			return isMatch
		}
	}

	return isMatch
}

yarn serve	# vue-cli-service serve 					=> .env / .env.development
yarn prod	# vue-cli-service serve --mode production	=> .env.production
yarn dev	# vue-cli-service serve --mode development" => .env.development

export default defineComponent({
  name: 'App',
  components: {},
  setup() {

	const Constant = {
      GolangAPI: {
        userLogin: () => { return `${Constant.baseAPI}/login` },
        userRegistry: () => { return `${Constant.baseAPI}/user` },
        appVersionList: (page: number) => { return `${Constant.baseAPI}/versionList/${page}` },
        appendVersion: () => { return `${Constant.baseAPI}/appVersion` },
        deleteVersion: (id: string) => { return `${Constant.baseAPI}/appVersion/${id}`},
        editVersion: (id: string, type: StoreType) => { return `${Constant.baseAPI}/appVersion/${id}/${type}`},
        saveVersion: () => { return `${Constant.baseAPI}/saveAppVersion` },
        uploadVersion: () => { return `${Constant.baseAPI}/uploadExcel` },
        refreshVersion: () => { return `${Constant.baseAPI}/forceUpdate` },
        checkToken: () => { return `${Constant.baseAPI}/checkToken` },
        updateVersionType: (id: string) => { return `${Constant.baseAPI}/updateType/${id}` },
      },
	},
	
	const Utility = {
		initSetting: () => {
    		Constant.baseAPI = `${process.env.VUE_APP_BASE_API}`
    	},
  	}
}