在完成中间件的介绍和日志中间件的代码后，我们的程序已经基本能正常跑通了，但如果要上生产，还少了一些必要的功能，例如鉴权、异常捕捉等。本章我们介绍如何编写鉴权中间件。
鉴权访问，说白了就是给用户的请求增加一些限制条件，过滤掉不符合要求的请求。完善的鉴权模块可以让我们的服务跑得更加安全，特别是面向公共的服务。
常用的无状态鉴权方式 网络鉴权 通常有IP白名单方式，通过获取客户端的真实IP来对请求进行过滤
用户鉴权 通过账号密码或者分配的密钥、Token等方式进行认证，常用的cookies、oauth2.0都是这种方式
加密算法鉴权 客户端使用加密算法对用户的参数进行计算加密得到Token，并将参数和Token一起发送；服务端使用同样的加密算法对请求参数进行加密后比较Token的值是否一致。
Gin-IPs 鉴权访问 为了让我们的服务更加安全，我们通常是混合多种鉴权方式使用。本文采取“用户鉴权”和“加密算法鉴权”混合方式。
鉴权算法介绍 通过某种方式生成或者手动指定分配公钥和私钥对给用户，用户使用公钥和请求参数组成消息内容，使用私钥对消息内容进行哈希计算，得到固定长度的字符串。 服务器使用同样的方式对用户请求的参数进行哈希计算后比较。由于这里面的算法和密钥对都是私有的，所以安全性较高，适用于大多数场景。
加密代码 // 签名算法如下 /* Signature = HMAC-SHA1(‘SecretKey’, UTF-8-Encoding-Of( StringToSign ) ) ); StringToSign = method + “\n” + URL + “\n” + Sort-UrlParams + “\n” + Content-MD5 + “\n” + // md5(params) Expires + “\n” + AccessKey; */ func genSignature(accessKey, secretKey, uri, method, urlParams, params, nowTS string) (string, error) { if params != “” { md5Ctx := md5.New() _, _ = io.WriteString(md5Ctx, params) params = fmt.Sprintf("%x", md5Ctx.Sum(nil)) }
strSign := method + "\n" + uri + "\n" + urlParams + "\n" + params + "\n" + nowTS + "\n" + accessKey sign := hmacSHA1Encrypt(strSign, secretKey) return sign, nil}
// hmacSHA1Encrypt encrypt the encryptText use encryptKey func hmacSHA1Encrypt(encryptText, encryptKey string) string { key := []byte(encryptKey) mac := hmac.New(sha1.New, key) mac.Write([]byte(encryptText)) var str = hex.EncodeToString(mac.Sum(nil)) return str } Gin鉴权中间件使用 func Validate() gin.HandlerFunc { return func(c *gin.Context) { response := route_response.Response{} response.Data.List = []interface{}{} // 初始化为空切片，而不是空引用 traceId := SnowWorker.GetId() c.Writer.Header().Set(“X-Request-Trace-Id”, traceId) http://bbs.quyouji.com/topic.asp?id=1505 http://bbs.quyouji.com/topic.asp?id=1506 http://bbs.quyouji.com/topic.asp?id=1507 http://bbs.quyouji.com/topic.asp?id=1508 http://bbs.quyouji.com/topic.asp?id=1509 http://bbs.quyouji.com/topic.asp?id=1510 http://bbs.quyouji.com/topic.asp?id=1511 http://bbs.quyouji.com/topic.asp?id=1512 http://bbs.quyouji.com/topic.asp?id=1513 http://bbs.quyouji.com/topic.asp?id=1514 http://bbs.quyouji.com/topic.asp?id=1515 http://bbs.quyouji.com/topic.asp?id=1516 http://bbs.quyouji.com/topic.asp?id=1517 http://bbs.quyouji.com/topic.asp?id=1518 http://bbs.quyouji.com/topic.asp?id=1519 http://bbs.quyouji.com/topic.asp?id=1520 http://bbs.quyouji.com/topic.asp?id=1521 http://bbs.quyouji.com/topic.asp?id=1522 http://bbs.quyouji.com/topic.asp?id=1523 http://bbs.quyouji.com/topic.asp?id=1524 http://bbs.quyouji.com/topic.asp?id=1525 http://bbs.quyouji.com/topic.asp?id=1526 http://bbs.quyouji.com/topic.asp?id=1527 http://bbs.quyouji.com/topic.asp?id=1528 http://bbs.quyouji.com/topic.asp?id=1529 http://bbs.quyouji.com/topic.asp?id=1530 http://bbs.quyouji.com/topic.asp?id=1531 http://bbs.quyouji.com/topic.asp?id=1532 http://bbs.quyouji.com/topic.asp?id=1533 http://bbs.quyouji.com/topic.asp?id=1534 http://bbs.quyouji.com/topic.asp?id=1535 http://bbs.quyouji.com/topic.asp?id=1536 http://bbs.quyouji.com/topic.asp?id=1537 http://bbs.quyouji.com/topic.asp?id=1538 http://bbs.quyouji.com/topic.asp?id=1539 http://bbs.quyouji.com/topic.asp?id=1540 http://bbs.quyouji.com/topic.asp?id=1541 http://bbs.quyouji.com/topic.asp?id=1542 http://bbs.quyouji.com/topic.asp?id=1543 http://bbs.quyouji.com/topic.asp?id=1544 http://bbs.quyouji.com/topic.asp?id=1545 http://bbs.quyouji.com/topic.asp?id=1546 http://bbs.quyouji.com/topic.asp?id=1547 http://bbs.quyouji.com/topic.asp?id=1548 http://bbs.quyouji.com/topic.asp?id=1549 http://bbs.quyouji.com/topic.asp?id=1550 http://bbs.quyouji.com/topic.asp?id=1551 http://bbs.quyouji.com/topic.asp?id=1552 http://bbs.quyouji.com/topic.asp?id=1553 http://bbs.quyouji.com/topic.asp?id=1554 http://bbs.quyouji.com/topic.asp?id=1555 http://bbs.quyouji.com/topic.asp?id=1556 http://bbs.quyouji.com/topic.asp?id=1557 http://bbs.quyouji.com/topic.asp?id=1558 http://bbs.quyouji.com/topic.asp?id=1559 http://bbs.quyouji.com/topic.asp?id=1560 http://bbs.quyouji.com/topic.asp?id=1561 http://bbs.quyouji.com/topic.asp?id=1562 http://bbs.quyouji.com/topic.asp?id=1563 http://bbs.quyouji.com/topic.asp?id=1564 http://bbs.quyouji.com/topic.asp?id=1565 http://bbs.quyouji.com/topic.asp?id=1566 http://bbs.quyouji.com/topic.asp?id=1567 http://bbs.quyouji.com/topic.asp?id=1568 http://bbs.quyouji.com/topic.asp?id=1569 http://bbs.quyouji.com/topic.asp?id=1570 http://bbs.quyouji.com/topic.asp?id=1571 http://bbs.quyouji.com/topic.asp?id=1572 http://bbs.quyouji.com/topic.asp?id=1573 http://bbs.quyouji.com/topic.asp?id=1574 http://bbs.quyouji.com/topic.asp?id=1575 http://bbs.quyouji.com/topic.asp?id=1576 http://bbs.quyouji.com/topic.asp?id=1577 http://bbs.quyouji.com/topic.asp?id=1578 http://bbs.quyouji.com/topic.asp?id=1579 http://bbs.quyouji.com/topic.asp?id=1580 http://bbs.quyouji.com/topic.asp?id=1581 http://bbs.quyouji.com/topic.asp?id=1582 http://bbs.quyouji.com/topic.asp?id=1583 http://bbs.quyouji.com/topic.asp?id=1584 http://bbs.quyouji.com/topic.asp?id=1585 http://bbs.quyouji.com/topic.asp?id=1586 http://bbs.quyouji.com/topic.asp?id=1587 http://bbs.quyouji.com/topic.asp?id=1588 http://bbs.quyouji.com/topic.asp?id=1589 http://bbs.quyouji.com/topic.asp?id=1590 http://bbs.quyouji.com/topic.asp?id=1591 http://bbs.quyouji.com/topic.asp?id=1592 http://bbs.quyouji.com/topic.asp?id=1593 http://bbs.quyouji.com/topic.asp?id=1594 http://bbs.quyouji.com/topic.asp?id=1595 http://bbs.quyouji.com/topic.asp?id=1596 http://bbs.quyouji.com/topic.asp?id=1597 http://bbs.quyouji.com/topic.asp?id=1598 http://bbs.quyouji.com/topic.asp?id=1599 http://bbs.quyouji.com/topic.asp?id=1600 http://bbs.quyouji.com/topic.asp?id=1601 http://bbs.quyouji.com/topic.asp?id=1602 http://bbs.quyouji.com/topic.asp?id=1603 http://bbs.quyouji.com/topic.asp?id=1604 http://bbs.quyouji.com/topic.asp?id=1605 http://bbs.quyouji.com/topic.asp?id=1606 http://bbs.quyouji.com/topic.asp?id=1607 http://bbs.quyouji.com/topic.asp?id=1608 http://bbs.quyouji.com/topic.asp?id=1609 http://bbs.quyouji.com/topic.asp?id=1610 http://bbs.quyouji.com/topic.asp?id=1611 http://bbs.quyouji.com/topic.asp?id=1612 http://bbs.quyouji.com/topic.asp?id=1613 http://bbs.quyouji.com/topic.asp?id=1614 http://bbs.quyouji.com/topic.asp?id=1615 http://bbs.quyouji.com/topic.asp?id=1616 http://bbs.quyouji.com/topic.asp?id=1617 http://bbs.quyouji.com/topic.asp?id=1618 http://bbs.quyouji.com/topic.asp?id=1619 http://bbs.quyouji.com/topic.asp?id=1620 http://bbs.quyouji.com/topic.asp?id=1621 http://bbs.quyouji.com/topic.asp?id=1622 http://bbs.quyouji.com/topic.asp?id=1623 http://bbs.quyouji.com/topic.asp?id=1624 http://bbs.quyouji.com/topic.asp?id=1625 http://bbs.quyouji.com/topic.asp?id=1626 http://bbs.quyouji.com/topic.asp?id=1627 http://bbs.quyouji.com/topic.asp?id=1628 http://bbs.quyouji.com/topic.asp?id=1629 http://bbs.quyouji.com/topic.asp?id=1630 http://bbs.quyouji.com/topic.asp?id=1631 http://bbs.quyouji.com/topic.asp?id=1632 http://bbs.quyouji.com/topic.asp?id=1633 http://bbs.quyouji.com/topic.asp?id=1634 http://bbs.quyouji.com/topic.asp?id=1635 http://bbs.quyouji.com/topic.asp?id=1636 http://bbs.quyouji.com/topic.asp?id=1637 http://bbs.quyouji.com/topic.asp?id=1638 http://bbs.quyouji.com/topic.asp?id=1639 http://bbs.quyouji.com/topic.asp?id=1640 http://bbs.quyouji.com/topic.asp?id=1641 http://bbs.quyouji.com/topic.asp?id=1642 http://bbs.quyouji.com/topic.asp?id=1643 http://bbs.quyouji.com/topic.asp?id=1644 http://bbs.quyouji.com/topic.asp?id=1645 http://bbs.quyouji.com/topic.asp?id=1646 http://bbs.quyouji.com/topic.asp?id=1647 http://bbs.quyouji.com/topic.asp?id=1648 http://bbs.quyouji.com/topic.asp?id=1649 http://bbs.quyouji.com/topic.asp?id=1650 http://bbs.quyouji.com/topic.asp?id=1651 http://bbs.quyouji.com/topic.asp?id=1652 http://bbs.quyouji.com/topic.asp?id=1653 http://bbs.quyouji.com/topic.asp?id=1654 http://bbs.quyouji.com/topic.asp?id=1655 http://bbs.quyouji.com/topic.asp?id=1656 http://bbs.quyouji.com/topic.asp?id=1657 http://bbs.quyouji.com/topic.asp?id=1658 http://bbs.quyouji.com/topic.asp?id=1659 http://bbs.quyouji.com/topic.asp?id=1660 http://bbs.quyouji.com/topic.asp?id=1661 http://bbs.quyouji.com/topic.asp?id=1662 http://bbs.quyouji.com/topic.asp?id=1663 http://bbs.quyouji.com/topic.asp?id=1664 http://bbs.quyouji.com/topic.asp?id=1665 http://bbs.quyouji.com/topic.asp?id=1666 http://bbs.quyouji.com/topic.asp?id=1667 http://bbs.quyouji.com/topic.asp?id=1668 http://bbs.quyouji.com/topic.asp?id=1669 http://bbs.quyouji.com/topic.asp?id=1670 http://bbs.quyouji.com/topic.asp?id=1671 http://bbs.quyouji.com/topic.asp?id=1672 http://bbs.quyouji.com/topic.asp?id=1673 http://bbs.quyouji.com/topic.asp?id=1674 http://bbs.quyouji.com/topic.asp?id=1675 http://bbs.quyouji.com/topic.asp?id=1676 http://bbs.quyouji.com/topic.asp?id=1677 http://bbs.quyouji.com/topic.asp?id=1678 http://bbs.quyouji.com/topic.asp?id=1679 http://bbs.quyouji.com/topic.asp?id=1680 http://bbs.quyouji.com/topic.asp?id=1681 http://bbs.quyouji.com/topic.asp?id=1682 http://bbs.quyouji.com/topic.asp?id=1683 http://bbs.quyouji.com/topic.asp?id=1684 http://bbs.quyouji.com/topic.asp?id=1685 http://bbs.quyouji.com/topic.asp?id=1686 http://bbs.quyouji.com/topic.asp?id=1687 http://bbs.quyouji.com/topic.asp?id=1688 http://bbs.quyouji.com/topic.asp?id=1689 http://bbs.quyouji.com/topic.asp?id=1690 http://bbs.quyouji.com/topic.asp?id=1691 http://bbs.quyouji.com/topic.asp?id=1692 http://bbs.quyouji.com/topic.asp?id=1693 http://bbs.quyouji.com/topic.asp?id=1694 http://bbs.quyouji.com/topic.asp?id=1695 http://bbs.quyouji.com/topic.asp?id=1696 http://bbs.quyouji.com/topic.asp?id=1697 http://bbs.quyouji.com/topic.asp?id=1698 http://bbs.quyouji.com/topic.asp?id=1699 http://bbs.quyouji.com/topic.asp?id=1700 http://bbs.quyouji.com/topic.asp?id=1701 http://bbs.quyouji.com/topic.asp?id=1702 http://bbs.quyouji.com/topic.asp?id=1703 http://bbs.quyouji.com/topic.asp?id=1704 http://bbs.quyouji.com/topic.asp?id=1705 http://bbs.quyouji.com/topic.asp?id=1706 http://bbs.quyouji.com/topic.asp?id=1707 http://bbs.quyouji.com/topic.asp?id=1708 http://bbs.quyouji.com/topic.asp?id=1709 http://bbs.quyouji.com/topic.asp?id=1710 http://bbs.quyouji.com/topic.asp?id=1711 http://bbs.quyouji.com/topic.asp?id=1712 http://bbs.quyouji.com/topic.asp?id=1713 http://bbs.quyouji.com/topic.asp?id=1714 http://bbs.quyouji.com/topic.asp?id=1715 http://bbs.quyouji.com/topic.asp?id=1716 http://bbs.quyouji.com/topic.asp?id=1717 http://bbs.quyouji.com/topic.asp?id=1718 http://bbs.quyouji.com/topic.asp?id=1719 http://bbs.quyouji.com/topic.asp?id=1720 http://bbs.quyouji.com/topic.asp?id=1721 http://bbs.quyouji.com/topic.asp?id=1722 http://bbs.quyouji.com/topic.asp?id=1723 http://bbs.quyouji.com/topic.asp?id=1724 http://bbs.quyouji.com/topic.asp?id=1725 http://bbs.quyouji.com/topic.asp?id=1726 http://bbs.quyouji.com/topic.asp?id=1727 http://bbs.quyouji.com/topic.asp?id=1728 http://bbs.quyouji.com/topic.asp?id=1729 http://bbs.quyouji.com/topic.asp?id=1730 http://bbs.quyouji.com/topic.asp?id=1731 http://bbs.quyouji.com/topic.asp?id=1732 http://bbs.quyouji.com/topic.asp?id=1733 http://bbs.quyouji.com/topic.asp?id=1734 http://bbs.quyouji.com/topic.asp?id=1735 http://bbs.quyouji.com/topic.asp?id=1736 http://bbs.quyouji.com/topic.asp?id=1737 http://bbs.quyouji.com/topic.asp?id=1738 http://bbs.quyouji.com/topic.asp?id=1739 http://bbs.quyouji.com/topic.asp?id=1740 http://bbs.quyouji.com/topic.asp?id=1741 http://bbs.quyouji.com/topic.asp?id=1742 http://bbs.quyouji.com/topic.asp?id=1743 http://bbs.quyouji.com/topic.asp?id=1744 http://bbs.quyouji.com/topic.asp?id=1745 http://bbs.quyouji.com/topic.asp?id=1746 http://bbs.quyouji.com/topic.asp?id=1747 http://bbs.quyouji.com/topic.asp?id=1748 http://bbs.quyouji.com/topic.asp?id=1749 http://bbs.quyouji.com/topic.asp?id=1750 http://bbs.quyouji.com/topic.asp?id=1751 http://bbs.quyouji.com/topic.asp?id=1752 http://bbs.quyouji.com/topic.asp?id=1753 http://bbs.quyouji.com/topic.asp?id=1754 http://bbs.quyouji.com/topic.asp?id=1755 http://bbs.quyouji.com/topic.asp?id=1756 http://bbs.quyouji.com/topic.asp?id=1757 http://bbs.quyouji.com/topic.asp?id=1758 http://bbs.quyouji.com/topic.asp?id=1759 http://bbs.quyouji.com/topic.asp?id=1760 http://bbs.quyouji.com/topic.asp?id=1761 http://bbs.quyouji.com/topic.asp?id=1762 http://bbs.quyouji.com/topic.asp?id=1763 http://bbs.quyouji.com/topic.asp?id=1764 http://bbs.quyouji.com/topic.asp?id=1765 http://bbs.quyouji.com/topic.asp?id=1766 http://bbs.quyouji.com/topic.asp?id=1767 http://bbs.quyouji.com/topic.asp?id=1768 http://bbs.quyouji.com/topic.asp?id=1769 http://bbs.quyouji.com/topic.asp?id=1770 http://bbs.quyouji.com/topic.asp?id=1771 http://bbs.quyouji.com/topic.asp?id=1772 http://bbs.quyouji.com/topic.asp?id=1773 http://bbs.quyouji.com/topic.asp?id=1774 http://bbs.quyouji.com/topic.asp?id=1775 http://bbs.quyouji.com/topic.asp?id=1776 http://bbs.quyouji.com/topic.asp?id=1777 http://bbs.quyouji.com/topic.asp?id=1778 http://bbs.quyouji.com/topic.asp?id=1779 http://bbs.quyouji.com/topic.asp?id=1780 http://bbs.quyouji.com/topic.asp?id=1781 http://bbs.quyouji.com/topic.asp?id=1782 http://bbs.quyouji.com/topic.asp?id=1783 http://bbs.quyouji.com/topic.asp?id=1784 http://bbs.quyouji.com/topic.asp?id=1785 http://bbs.quyouji.com/topic.asp?id=1786 http://bbs.quyouji.com/topic.asp?id=1787 http://bbs.quyouji.com/topic.asp?id=1788 http://bbs.quyouji.com/topic.asp?id=1789 http://bbs.quyouji.com/topic.asp?id=1790 http://bbs.quyouji.com/topic.asp?id=1791 http://bbs.quyouji.com/topic.asp?id=1792 http://bbs.quyouji.com/topic.asp?id=1793 http://bbs.quyouji.com/topic.asp?id=1794 http://bbs.quyouji.com/topic.asp?id=1795 http://bbs.quyouji.com/topic.asp?id=1796 http://bbs.quyouji.com/topic.asp?id=1797 http://bbs.quyouji.com/topic.asp?id=1798 http://bbs.quyouji.com/topic.asp?id=1799 http://bbs.quyouji.com/topic.asp?id=1800 http://bbs.quyouji.com/topic.asp?id=1801 http://bbs.quyouji.com/topic.asp?id=1802 http://bbs.quyouji.com/topic.asp?id=1803 http://bbs.quyouji.com/topic.asp?id=1804 http://bbs.quyouji.com/topic.asp?id=1805 http://bbs.quyouji.com/topic.asp?id=1806 http://bbs.quyouji.com/topic.asp?id=1807 http://bbs.quyouji.com/topic.asp?id=1808 http://bbs.quyouji.com/topic.asp?id=1809 http://bbs.quyouji.com/topic.asp?id=1810 http://bbs.quyouji.com/topic.asp?id=1811 http://bbs.quyouji.com/topic.asp?id=1812 http://bbs.quyouji.com/topic.asp?id=1813 http://bbs.quyouji.com/topic.asp?id=1814 http://bbs.quyouji.com/topic.asp?id=1815 http://bbs.quyouji.com/topic.asp?id=1816 http://bbs.quyouji.com/topic.asp?id=1817 http://bbs.quyouji.com/topic.asp?id=1818 http://bbs.quyouji.com/topic.asp?id=1819 http://bbs.quyouji.com/topic.asp?id=1820 http://bbs.quyouji.com/topic.asp?id=1821 http://bbs.quyouji.com/topic.asp?id=1822 http://bbs.quyouji.com/topic.asp?id=1823 http://bbs.quyouji.com/topic.asp?id=1824 http://bbs.quyouji.com/topic.asp?id=1825 http://bbs.quyouji.com/topic.asp?id=1826 http://bbs.quyouji.com/topic.asp?id=1827 http://bbs.quyouji.com/topic.asp?id=1828 http://bbs.quyouji.com/topic.asp?id=1829 http://bbs.quyouji.com/topic.asp?id=1830 http://bbs.quyouji.com/topic.asp?id=1831 http://bbs.quyouji.com/topic.asp?id=1832 http://bbs.quyouji.com/topic.asp?id=1833 http://bbs.quyouji.com/topic.asp?id=1834 http://bbs.quyouji.com/topic.asp?id=1835 http://bbs.quyouji.com/topic.asp?id=1836 http://bbs.quyouji.com/topic.asp?id=1837 http://bbs.quyouji.com/topic.asp?id=1838 http://bbs.quyouji.com/topic.asp?id=1839 http://bbs.quyouji.com/topic.asp?id=1840 http://bbs.quyouji.com/topic.asp?id=1841 http://bbs.quyouji.com/topic.asp?id=1842 http://bbs.quyouji.com/topic.asp?id=1843 http://bbs.quyouji.com/topic.asp?id=1844 http://bbs.quyouji.com/topic.asp?id=1845 http://bbs.quyouji.com/topic.asp?id=1846 http://bbs.quyouji.com/topic.asp?id=1847 http://bbs.quyouji.com/topic.asp?id=1848 http://bbs.quyouji.com/topic.asp?id=1849 http://bbs.quyouji.com/topic.asp?id=1850 http://bbs.quyouji.com/topic.asp?id=1851 http://bbs.quyouji.com/topic.asp?id=1852 http://bbs.quyouji.com/topic.asp?id=1853 http://bbs.quyouji.com/topic.asp?id=1854 http://bbs.quyouji.com/topic.asp?id=1855 http://bbs.quyouji.com/topic.asp?id=1856 http://bbs.quyouji.com/topic.asp?id=1857 http://bbs.quyouji.com/topic.asp?id=1858 http://bbs.quyouji.com/topic.asp?id=1859 http://bbs.quyouji.com/topic.asp?id=1860 http://bbs.quyouji.com/topic.asp?id=1861 http://bbs.quyouji.com/topic.asp?id=1862 http://bbs.quyouji.com/topic.asp?id=1863 http://bbs.quyouji.com/topic.asp?id=1864 http://bbs.quyouji.com/topic.asp?id=1865 http://bbs.quyouji.com/topic.asp?id=1866 http://bbs.quyouji.com/topic.asp?id=1867 http://bbs.quyouji.com/topic.asp?id=1868 http://bbs.quyouji.com/topic.asp?id=1869 http://bbs.quyouji.com/topic.asp?id=1870 http://bbs.quyouji.com/topic.asp?id=1871 http://bbs.quyouji.com/topic.asp?id=1872 http://bbs.quyouji.com/topic.asp?id=1873 http://bbs.quyouji.com/topic.asp?id=1874 http://bbs.quyouji.com/topic.asp?id=1875 http://bbs.quyouji.com/topic.asp?id=1876 http://bbs.quyouji.com/topic.asp?id=1877 http://bbs.quyouji.com/topic.asp?id=1878 http://bbs.quyouji.com/topic.asp?id=1879 http://bbs.quyouji.com/topic.asp?id=1880 http://bbs.quyouji.com/topic.asp?id=1881 http://bbs.quyouji.com/topic.asp?id=1882 http://bbs.quyouji.com/topic.asp?id=1883 http://bbs.quyouji.com/topic.asp?id=1884 http://bbs.quyouji.com/topic.asp?id=1885 http://bbs.quyouji.com/topic.asp?id=1886 http://bbs.quyouji.com/topic.asp?id=1887 http://bbs.quyouji.com/topic.asp?id=1888 http://bbs.quyouji.com/topic.asp?id=1889 http://bbs.quyouji.com/topic.asp?id=1890 http://bbs.quyouji.com/topic.asp?id=1891 http://bbs.quyouji.com/topic.asp?id=1892 http://bbs.quyouji.com/topic.asp?id=1893 http://bbs.quyouji.com/topic.asp?id=1894 http://bbs.quyouji.com/topic.asp?id=1895 http://bbs.quyouji.com/topic.asp?id=1896 http://bbs.quyouji.com/topic.asp?id=1897 http://bbs.quyouji.com/topic.asp?id=1898 http://bbs.quyouji.com/topic.asp?id=1899 http://bbs.quyouji.com/topic.asp?id=1900 http://bbs.quyouji.com/topic.asp?id=1901 http://bbs.quyouji.com/topic.asp?id=1902 http://bbs.quyouji.com/topic.asp?id=1903 http://bbs.quyouji.com/topic.asp?id=1904 http://bbs.quyouji.com/topic.asp?id=1905 http://bbs.quyouji.com/topic.asp?id=1906 http://bbs.quyouji.com/topic.asp?id=1907 http://bbs.quyouji.com/topic.asp?id=1908 http://bbs.quyouji.com/topic.asp?id=1909 http://bbs.quyouji.com/topic.asp?id=1910 http://bbs.quyouji.com/topic.asp?id=1911 http://bbs.quyouji.com/topic.asp?id=1912 http://bbs.quyouji.com/topic.asp?id=1913 http://bbs.quyouji.com/topic.asp?id=1914 http://bbs.quyouji.com/topic.asp?id=1915 http://bbs.quyouji.com/topic.asp?id=1916 http://bbs.quyouji.com/topic.asp?id=1917 http://bbs.quyouji.com/topic.asp?id=1918 http://bbs.quyouji.com/topic.asp?id=1919 http://bbs.quyouji.com/topic.asp?id=1920 http://bbs.quyouji.com/topic.asp?id=1921 http://bbs.quyouji.com/topic.asp?id=1922 http://bbs.quyouji.com/topic.asp?id=1923 http://bbs.quyouji.com/topic.asp?id=1924 http://bbs.quyouji.com/topic.asp?id=1925 http://bbs.quyouji.com/topic.asp?id=1926 http://bbs.quyouji.com/topic.asp?id=1927 http://bbs.quyouji.com/topic.asp?id=1928 http://bbs.quyouji.com/topic.asp?id=1929 http://bbs.quyouji.com/topic.asp?id=1930 http://bbs.quyouji.com/topic.asp?id=1931 http://bbs.quyouji.com/topic.asp?id=1932 http://bbs.quyouji.com/topic.asp?id=1933 http://bbs.quyouji.com/topic.asp?id=1934 http://bbs.quyouji.com/topic.asp?id=1935 http://bbs.quyouji.com/topic.asp?id=1936 http://bbs.quyouji.com/topic.asp?id=1937 http://bbs.quyouji.com/topic.asp?id=1938 http://bbs.quyouji.com/topic.asp?id=1939 http://bbs.quyouji.com/topic.asp?id=1940 http://bbs.quyouji.com/topic.asp?id=1941 http://bbs.quyouji.com/topic.asp?id=1942 http://bbs.quyouji.com/topic.asp?id=1943 http://bbs.quyouji.com/topic.asp?id=1944 http://bbs.quyouji.com/topic.asp?id=1945 http://bbs.quyouji.com/topic.asp?id=1946 http://bbs.quyouji.com/topic.asp?id=1947 http://bbs.quyouji.com/topic.asp?id=1948 http://bbs.quyouji.com/topic.asp?id=1949 http://bbs.quyouji.com/topic.asp?id=1950 http://bbs.quyouji.com/topic.asp?id=1951 http://bbs.quyouji.com/topic.asp?id=1952 http://bbs.quyouji.com/topic.asp?id=1953 http://bbs.quyouji.com/topic.asp?id=1954 http://bbs.quyouji.com/topic.asp?id=1955 http://bbs.quyouji.com/topic.asp?id=1956 http://bbs.quyouji.com/topic.asp?id=1957 http://bbs.quyouji.com/topic.asp?id=1958 http://bbs.quyouji.com/topic.asp?id=1959 http://bbs.quyouji.com/topic.asp?id=1960 http://bbs.quyouji.com/topic.asp?id=1961 http://bbs.quyouji.com/topic.asp?id=1962 http://bbs.quyouji.com/topic.asp?id=1963 http://bbs.quyouji.com/topic.asp?id=1964 http://bbs.quyouji.com/topic.asp?id=1965 http://bbs.quyouji.com/topic.asp?id=1966 http://bbs.quyouji.com/topic.asp?id=1967 http://bbs.quyouji.com/topic.asp?id=1968 http://bbs.quyouji.com/topic.asp?id=1969 http://bbs.quyouji.com/topic.asp?id=1970 http://bbs.quyouji.com/topic.asp?id=1971 http://bbs.quyouji.com/topic.asp?id=1972 http://bbs.quyouji.com/topic.asp?id=1973 http://bbs.quyouji.com/topic.asp?id=1974 http://bbs.quyouji.com/topic.asp?id=1975 http://bbs.quyouji.com/topic.asp?id=1976 http://bbs.quyouji.com/topic.asp?id=1977 http://bbs.quyouji.com/topic.asp?id=1978 http://bbs.quyouji.com/topic.asp?id=1979 http://bbs.quyouji.com/topic.asp?id=1980 http://bbs.quyouji.com/topic.asp?id=1981 http://bbs.quyouji.com/topic.asp?id=1982 http://bbs.quyouji.com/topic.asp?id=1983 http://bbs.quyouji.com/topic.asp?id=1984 http://bbs.quyouji.com/topic.asp?id=1985 http://bbs.quyouji.com/topic.asp?id=1986 http://bbs.quyouji.com/topic.asp?id=1987 http://bbs.quyouji.com/topic.asp?id=1988 http://bbs.quyouji.com/topic.asp?id=1989 http://bbs.quyouji.com/topic.asp?id=1990 http://bbs.quyouji.com/topic.asp?id=1991 http://bbs.quyouji.com/topic.asp?id=1992 http://bbs.quyouji.com/topic.asp?id=1993 http://bbs.quyouji.com/topic.asp?id=1994 http://bbs.quyouji.com/topic.asp?id=1995 http://bbs.quyouji.com/topic.asp?id=1996 http://bbs.quyouji.com/topic.asp?id=1997 http://bbs.quyouji.com/topic.asp?id=1998 http://bbs.quyouji.com/topic.asp?id=1999 http://bbs.quyouji.com/topic.asp?id=2000 http://bbs.quyouji.com/topic.asp?id=2001 http://bbs.quyouji.com/topic.asp?id=2002 http://bbs.quyouji.com/topic.asp?id=2003 http://bbs.quyouji.com/topic.asp?id=2004 http://bbs.quyouji.com/topic.asp?id=2005 http://bbs.quyouji.com/topic.asp?id=2006 http://bbs.quyouji.com/topic.asp?id=2007 http://bbs.quyouji.com/topic.asp?id=2008 http://bbs.quyouji.com/topic.asp?id=2009 http://bbs.quyouji.com/topic.asp?id=2010 http://bbs.quyouji.com/topic.asp?id=2011 http://bbs.quyouji.com/topic.asp?id=2012 http://bbs.quyouji.com/topic.asp?id=2013 http://bbs.quyouji.com/topic.asp?id=2014 http://bbs.quyouji.com/topic.asp?id=2015 http://bbs.quyouji.com/topic.asp?id=2016 http://bbs.quyouji.com/topic.asp?id=2017 http://bbs.quyouji.com/topic.asp?id=2018 http://bbs.quyouji.com/topic.asp?id=2019 http://bbs.quyouji.com/topic.asp?id=2020 http://bbs.quyouji.com/topic.asp?id=2021 http://bbs.quyouji.com/topic.asp?id=2022 http://bbs.quyouji.com/topic.asp?id=2023 http://bbs.quyouji.com/topic.asp?id=2024 http://bbs.quyouji.com/topic.asp?id=2025 http://bbs.quyouji.com/topic.asp?id=2026 http://bbs.quyouji.com/topic.asp?id=2027 http://bbs.quyouji.com/topic.asp?id=2028 http://bbs.quyouji.com/topic.asp?id=2029 http://bbs.quyouji.com/topic.asp?id=2030 http://bbs.quyouji.com/topic.asp?id=2031 http://bbs.quyouji.com/topic.asp?id=2032 http://bbs.quyouji.com/topic.asp?id=2033 http://bbs.quyouji.com/topic.asp?id=2034 http://bbs.quyouji.com/topic.asp?id=2035 http://bbs.quyouji.com/topic.asp?id=2036 http://bbs.quyouji.com/topic.asp?id=2037 http://bbs.quyouji.com/topic.asp?id=2038 http://bbs.quyouji.com/topic.asp?id=2039 http://bbs.quyouji.com/topic.asp?id=2040 http://bbs.quyouji.com/topic.asp?id=2041 http://bbs.quyouji.com/topic.asp?id=2042 http://bbs.quyouji.com/topic.asp?id=2043 http://bbs.quyouji.com/topic.asp?id=2044 http://bbs.quyouji.com/topic.asp?id=2045 http://bbs.quyouji.com/topic.asp?id=2046 http://bbs.quyouji.com/topic.asp?id=2047 http://bbs.quyouji.com/topic.asp?id=2048 http://bbs.quyouji.com/topic.asp?id=2049 http://bbs.quyouji.com/topic.asp?id=2050 http://bbs.quyouji.com/topic.asp?id=2051 http://bbs.quyouji.com/topic.asp?id=2052 http://bbs.quyouji.com/topic.asp?id=2053 http://bbs.quyouji.com/topic.asp?id=2054 http://bbs.quyouji.com/topic.asp?id=2055 http://bbs.quyouji.com/topic.asp?id=2056 http://bbs.quyouji.com/topic.asp?id=2057 http://bbs.quyouji.com/topic.asp?id=2058 http://bbs.quyouji.com/topic.asp?id=2059 http://bbs.quyouji.com/topic.asp?id=2060 http://bbs.quyouji.com/topic.asp?id=2061 http://bbs.quyouji.com/topic.asp?id=2062 http://bbs.quyouji.com/topic.asp?id=2063 http://bbs.quyouji.com/topic.asp?id=2064 http://bbs.quyouji.com/topic.asp?id=2065 http://bbs.quyouji.com/topic.asp?id=2066 http://bbs.quyouji.com/topic.asp?id=2067 http://bbs.quyouji.com/topic.asp?id=2068 http://bbs.quyouji.com/topic.asp?id=2069 http://bbs.quyouji.com/topic.asp?id=2070 http://bbs.quyouji.com/topic.asp?id=2071 http://bbs.quyouji.com/topic.asp?id=2072 http://bbs.quyouji.com/topic.asp?id=2073 http://bbs.quyouji.com/topic.asp?id=2074 http://bbs.quyouji.com/topic.asp?id=2075 http://bbs.quyouji.com/topic.asp?id=2076 http://bbs.quyouji.com/topic.asp?id=2077 http://bbs.quyouji.com/topic.asp?id=2078 http://bbs.quyouji.com/topic.asp?id=2079 http://bbs.quyouji.com/topic.asp?id=2080 http://bbs.quyouji.com/topic.asp?id=2081 http://bbs.quyouji.com/topic.asp?id=2082 http://bbs.quyouji.com/topic.asp?id=2083 http://bbs.quyouji.com/topic.asp?id=2084 http://bbs.quyouji.com/topic.asp?id=2085 http://bbs.quyouji.com/topic.asp?id=2086 http://bbs.quyouji.com/topic.asp?id=2087 http://bbs.quyouji.com/topic.asp?id=2088 http://bbs.quyouji.com/topic.asp?id=2089 http://bbs.quyouji.com/topic.asp?id=2090 http://bbs.quyouji.com/topic.asp?id=2091 http://bbs.quyouji.com/topic.asp?id=2092 http://bbs.quyouji.com/topic.asp?id=2093 http://bbs.quyouji.com/topic.asp?id=2094 http://bbs.quyouji.com/topic.asp?id=2095 http://bbs.quyouji.com/topic.asp?id=2096 http://bbs.quyouji.com/topic.asp?id=2097 http://bbs.quyouji.com/topic.asp?id=2098 http://bbs.quyouji.com/topic.asp?id=2099 http://bbs.quyouji.com/topic.asp?id=2100 http://bbs.quyouji.com/topic.asp?id=2101 http://bbs.quyouji.com/topic.asp?id=2102 http://bbs.quyouji.com/topic.asp?id=2103 http://bbs.quyouji.com/topic.asp?id=2104 http://bbs.quyouji.com/topic.asp?id=2105 http://bbs.quyouji.com/topic.asp?id=2106 http://bbs.quyouji.com/topic.asp?id=2107 http://bbs.quyouji.com/topic.asp?id=2108 http://bbs.quyouji.com/topic.asp?id=2109 http://bbs.quyouji.com/topic.asp?id=2110 http://bbs.quyouji.com/topic.asp?id=2111 http://bbs.quyouji.com/topic.asp?id=2112 http://bbs.quyouji.com/topic.asp?id=2113 http://bbs.quyouji.com/topic.asp?id=2114 http://bbs.quyouji.com/topic.asp?id=2115 http://bbs.quyouji.com/topic.asp?id=2116 http://bbs.quyouji.com/topic.asp?id=2117 http://bbs.quyouji.com/topic.asp?id=2118 http://bbs.quyouji.com/topic.asp?id=2119 http://bbs.quyouji.com/topic.asp?id=2120 http://bbs.quyouji.com/topic.asp?id=2121 http://bbs.quyouji.com/topic.asp?id=2122 http://bbs.quyouji.com/topic.asp?id=2123 http://bbs.quyouji.com/topic.asp?id=2124 http://bbs.quyouji.com/topic.asp?id=2125 http://bbs.quyouji.com/topic.asp?id=2126 http://bbs.quyouji.com/topic.asp?id=2127 http://bbs.quyouji.com/topic.asp?id=2128 http://bbs.quyouji.com/topic.asp?id=2129 http://bbs.quyouji.com/topic.asp?id=2130 http://bbs.quyouji.com/topic.asp?id=2131 http://bbs.quyouji.com/topic.asp?id=2132 http://bbs.quyouji.com/topic.asp?id=2133 http://bbs.quyouji.com/topic.asp?id=2134 http://bbs.quyouji.com/topic.asp?id=2135 http://bbs.quyouji.com/topic.asp?id=2136 http://bbs.quyouji.com/topic.asp?id=2137 http://bbs.quyouji.com/topic.asp?id=2138 http://bbs.quyouji.com/topic.asp?id=2139 http://bbs.quyouji.com/topic.asp?id=2140 http://bbs.quyouji.com/topic.asp?id=2141 http://bbs.quyouji.com/topic.asp?id=2142 http://bbs.quyouji.com/topic.asp?id=2143 http://bbs.quyouji.com/topic.asp?id=2144 http://bbs.quyouji.com/topic.asp?id=2145 http://bbs.quyouji.com/topic.asp?id=2146 http://bbs.quyouji.com/topic.asp?id=2147 http://bbs.quyouji.com/topic.asp?id=2148 http://bbs.quyouji.com/topic.asp?id=2149 http://bbs.quyouji.com/topic.asp?id=2150 http://bbs.quyouji.com/topic.asp?id=2151 http://bbs.quyouji.com/topic.asp?id=2152 http://bbs.quyouji.com/topic.asp?id=2153
uri := c.Request.URL.Path // remoteAddr := c.ClientIP() // 也可以对客户端IP进行限制 contentType := c.Request.Header.Get("Content-Type") if contentType != "application/json" { c.Abort() response.Code, response.Message = configure.RequestParameterTypeError, "Content-Type 类型只支持 application/json" c.JSON(http.StatusUnauthorized, response) return } accessKey := c.DefaultQuery("accesskey", "") expires := c.DefaultQuery("expires", "") signature := c.DefaultQuery("signature", "") if accessKey == "" { c.Abort() response.Code, response.Message = configure.RequestParameterMiss, "Token缺失" c.JSON(http.StatusUnauthorized, response) return } secret, err := dao.FetchSecret(accessKey) if err != nil || "valid" != secret.State { c.Abort() response.Code, response.Message = configure.RequestKeyNotFound, "无效的Token" c.JSON(http.StatusUnauthorized, response) return } c.Writer.Header().Set("X-Request-User", secret.User) if expires == "" { c.Abort() response.Code, response.Message = configure.RequestParameterMiss, "有效期参数缺失" c.JSON(http.StatusUnauthorized, response) return } if signature == "" { c.Abort() response.Code, response.Message = configure.RequestParameterMiss, "签名缺失" c.JSON(http.StatusUnauthorized, response) return } secretKey := secret.SecretKey if nowTs, err := strconv.ParseInt(expires, 10, 64); err != nil { c.Abort() response.Code, response.Message = configure.RequestParameterTypeError, "有效期参数类型错误" c.JSON(http.StatusUnauthorized, response) return } else { passTime := time.Now().Unix() - nowTs if passTime < 0 || passTime >= configure.GinConfigValue.Expires { // 容错时间越大越容易被攻击，服务器时间必须准 c.Abort() response.Code, response.Message = configure.RequestExpired, "请求已过期" c.JSON(http.StatusUnauthorized, response) return } } method := strings.ToUpper(c.Request.Method) var urlParams, params string if "POST" == method || "PUT" == method { body, _ := ioutil.ReadAll(c.Request.Body) c.Request.Body = ioutil.NopCloser(bytes.NewBuffer(body)) // 重设body params = string(body) } else if "GET" == method || "DELETE" == method { queryParams := c.Request.URL.Query() allParams := make(map[string]string) for k, v := range queryParams { if k != "accesskey" && k != "expires" && k != "signature" { allParams[k] = v[0] // 如果某个key传入了2个，只用第一个的值 } } keys := getMapKeysSorted(allParams) for _, k := range keys { urlParams += k + allParams[k] } } if signatureString, err := genSignature(accessKey, secretKey, uri, method, urlParams, params, expires); err != nil { c.Abort() response.Code, response.Message = configure.ApiGenSignatureError, "API内部错误" c.JSON(http.StatusUnauthorized, response) return } else { if signature != signatureString { c.Abort() response.Code, response.Message = configure.RequestAuthorizedFailed, "API认证失败" c.JSON(http.StatusUnauthorized, response) return } } c.Next() }}
本文关于鉴权访问的介绍和使用到此为止，下一章我们将使用异常捕捉中间件来完善我们的程序。
Github 代码
