Victor_Jay
bbcd992614
- Session 结构体新增 Status 字段，Create/Validate 同步状态 - AuthService.Login 移除封禁检查，允许封禁用户登录 - 新增 BannedWriteGuard 中间件，拦截 POST/PUT/DELETE 写操作 - 封禁用户自动签到跳过 - 所有需登录的 API 路由组应用 BannedWriteGuard - AdminService.UpdateUserStatus 保留 DestroyByUID 确保状态刷新
143 lines
3.8 KiB
Go
143 lines
3.8 KiB
Go
package session
|
||
|
||
import (
|
||
"log"
|
||
"time"
|
||
|
||
"metazone.cc/metalab/internal/config"
|
||
"metazone.cc/metalab/internal/model"
|
||
)
|
||
|
||
// userStore SessionManager 对 UserRepo 的最小接口（ISP：1 个方法）
|
||
type userStore interface {
|
||
FindByIDForAuth(userID uint) (*model.User, error)
|
||
}
|
||
|
||
// Manager 会话管理器：创建、验证、销毁、续期
|
||
type Manager struct {
|
||
store Store
|
||
userRepo userStore
|
||
cfg *config.Config
|
||
}
|
||
|
||
// NewManager 构造函数
|
||
func NewManager(store Store, userRepo userStore, cfg *config.Config) *Manager {
|
||
return &Manager{store: store, userRepo: userRepo, cfg: cfg}
|
||
}
|
||
|
||
// Create 创建会话并写入存储
|
||
func (m *Manager) Create(user *model.User, rememberMe bool, ip, userAgent string) (string, error) {
|
||
sid, err := NewID()
|
||
if err != nil {
|
||
return "", err
|
||
}
|
||
now := time.Now()
|
||
s := &Session{
|
||
ID: sid,
|
||
UserID: user.ID,
|
||
Email: user.Email,
|
||
Username: user.Username,
|
||
Avatar: user.Avatar,
|
||
Role: user.Role,
|
||
Status: user.Status,
|
||
Exp: user.Exp,
|
||
RememberMe: rememberMe,
|
||
IP: ip,
|
||
UserAgent: userAgent,
|
||
CreatedAt: now,
|
||
LastAccess: now,
|
||
}
|
||
if err := m.store.Set(s); err != nil {
|
||
return "", err
|
||
}
|
||
log.Printf("[SessionManager] Created sid=%s uid=%d rememberMe=%v ip=%s", sid[:16]+"...", user.ID, rememberMe, ip)
|
||
return sid, nil
|
||
}
|
||
|
||
// Validate 验证会话：读取 → 检查过期 → 检查用户状态 → 续期 → 返回
|
||
// 若用户不存在则返回 nil；被封禁/锁定用户仍返回 session（由上层中间件决定可访问范围）
|
||
func (m *Manager) Validate(sid string) (*Session, error) {
|
||
if sid == "" {
|
||
return nil, nil
|
||
}
|
||
|
||
s, err := m.store.Get(sid)
|
||
if err != nil || s == nil {
|
||
return nil, nil
|
||
}
|
||
|
||
// 检查用户是否仍然存在
|
||
user, err := m.userRepo.FindByIDForAuth(s.UserID)
|
||
if err != nil {
|
||
log.Printf("[SessionManager] Validate: user not found uid=%d err=%v", s.UserID, err)
|
||
m.store.Delete(sid)
|
||
return nil, nil
|
||
}
|
||
|
||
// 同步 DB 最新字段（头像/用户名/角色/状态/经验值等可能已变更）
|
||
s.Avatar = user.Avatar
|
||
s.Username = user.Username
|
||
s.Role = user.Role
|
||
s.Status = user.Status
|
||
s.Exp = user.Exp
|
||
|
||
// 滑动窗口续期
|
||
s.Touch()
|
||
if err := m.store.Set(s); err != nil {
|
||
log.Printf("[SessionManager] Validate: touch failed sid=%s err=%v", sid[:16]+"...", err)
|
||
}
|
||
|
||
return s, nil
|
||
}
|
||
|
||
// Destroy 销毁单个会话（用户主动退出登录）
|
||
func (m *Manager) Destroy(sid string) error {
|
||
return m.store.Delete(sid)
|
||
}
|
||
|
||
// DestroyByUID 销毁某用户的所有会话（改密/注销/强制下线）
|
||
func (m *Manager) DestroyByUID(uid uint) error {
|
||
return m.store.DeleteByUID(uid)
|
||
}
|
||
|
||
// IdleTimeout 根据 rememberMe 返回对应的空闲超时时间
|
||
func (m *Manager) IdleTimeout(rememberMe bool) time.Duration {
|
||
if rememberMe {
|
||
return time.Duration(m.cfg.Session.RememberTimeout) * time.Minute
|
||
}
|
||
return time.Duration(m.cfg.Session.IdleTimeout) * time.Minute
|
||
}
|
||
|
||
// ListByUID 列出某用户的所有活跃会话
|
||
func (m *Manager) ListByUID(uid uint) ([]*Session, error) {
|
||
return m.store.ListByUID(uid)
|
||
}
|
||
|
||
// DestroyOtherByUID 销毁某用户除当前会话外的所有会话
|
||
func (m *Manager) DestroyOtherByUID(uid uint, currentSID string) error {
|
||
return m.store.DeleteByUIDExclude(uid, currentSID)
|
||
}
|
||
|
||
// UpdateRemark 更新指定会话的备注（需验证归属）
|
||
func (m *Manager) UpdateRemark(sid string, uid uint, remark string) error {
|
||
s, err := m.store.Get(sid)
|
||
if err != nil || s == nil {
|
||
return err
|
||
}
|
||
if s.UserID != uid {
|
||
return nil
|
||
}
|
||
s.Remark = remark
|
||
return m.store.Set(s)
|
||
}
|
||
|
||
// UpdateSession 直接更新会话存储（用于同步经验值等字段）
|
||
func (m *Manager) UpdateSession(s *Session) error {
|
||
return m.store.Set(s)
|
||
}
|
||
|
||
// GetStoreMetrics 返回当前存储的状态信息
|
||
func (m *Manager) GetStoreMetrics() StoreMetrics {
|
||
return m.store.Metrics()
|
||
}
|