Victor_Jay
daf87f895b
- 新增 internal/session 包：Session 结构体、Store 接口、MemoryStore（内存+后台清理）、RedisStore 预留 - Cookie 从 3 个精简为 1 个 mlb_sid（HttpOnly），移除 JWT access/refresh cookie - 会话过期采用滑动窗口：每次请求自动续期，记住我 30 天无操作过期 - AuthMiddleware/AuthAdmin/Maintenance 中间件改用 SessionManager.Validate() - AuthService Login/Register/ConfirmRestore 去除 token 生成，返回 *model.User - Controller 层在登录/注册后调用 SessionManager.Create 创建会话 - AdminService UpdateUserStatus/ResetUserToken 同步销毁 session 实现即时退登 - 改密/注销时通过 DestroyByUID 删除所有 session（替换 TokenVersion 检查） - config.yaml 新增 session 配置段（idle_timeout/remember_timeout/cleanup_interval） - TokenService/auth_parser/auth_token 标记废弃，移除 JWT 到期字段依赖
57 lines
1.7 KiB
Go
57 lines
1.7 KiB
Go
package controller
|
|
|
|
import (
|
|
"net/http"
|
|
|
|
"metazone.cc/metalab/internal/common"
|
|
"metazone.cc/metalab/internal/config"
|
|
"metazone.cc/metalab/internal/session"
|
|
"metazone.cc/metalab/internal/theme"
|
|
|
|
"github.com/gin-gonic/gin"
|
|
)
|
|
|
|
// AuthController 认证相关页面 + API
|
|
type AuthController struct {
|
|
authService authUseCase
|
|
sessionManager *session.Manager
|
|
rateLimiter rateLimiter
|
|
cfg *config.Config
|
|
}
|
|
|
|
// NewAuthController 构造函数
|
|
func NewAuthController(authService authUseCase, sm *session.Manager, limiter rateLimiter, cfg *config.Config) *AuthController {
|
|
return &AuthController{authService: authService, sessionManager: sm, rateLimiter: limiter, cfg: cfg}
|
|
}
|
|
|
|
// RegisterPage 注册页面（已登录用户重定向到首页）
|
|
func (ac *AuthController) RegisterPage(c *gin.Context) {
|
|
if _, exists := c.Get("uid"); exists {
|
|
c.Redirect(http.StatusFound, "/")
|
|
return
|
|
}
|
|
guidelines, err := theme.LoadContent("templates/MetaLab-2026/guidelines.html")
|
|
if err != nil {
|
|
c.String(http.StatusInternalServerError, "加载准则失败")
|
|
return
|
|
}
|
|
c.HTML(http.StatusOK, "auth/register.html", common.BuildPageData(c, gin.H{
|
|
"Title": "注册",
|
|
"ExtraCSS": "/static/css/auth.css",
|
|
"Guidelines": guidelines,
|
|
"RegistrationEnabled": ac.authService.IsRegistrationEnabled(),
|
|
}))
|
|
}
|
|
|
|
// LoginPage 登录页面（已登录用户重定向到首页）
|
|
func (ac *AuthController) LoginPage(c *gin.Context) {
|
|
if _, exists := c.Get("uid"); exists {
|
|
c.Redirect(http.StatusFound, "/")
|
|
return
|
|
}
|
|
c.HTML(http.StatusOK, "auth/login.html", common.BuildPageData(c, gin.H{
|
|
"Title": "登录",
|
|
"ExtraCSS": "/static/css/auth.css",
|
|
}))
|
|
}
|