Victor_Jay
fdb636f98f
- User 模型增加 exp 字段，等级规则 Lv0-Lv6 - 新增签到记录(UserCheckIn)与任务记录(UserTask)模型，唯一索引防重 - 自动签到：AuthMiddleware 验证会话后，基于 Asia/Shanghai 自然日自动签到 +5 经验 - 手动签到：下拉菜单"签到"按钮兜底，已签到显示"今日已签到"并禁用 - 首次任务经验：上传头像/设置用户名/设置个性签名各 +10，审核通过与直接更新均触发 - 经验值变动后自动比对等级，升级时通过通知系统发送"恭喜提升至 LvX" - 下拉菜单重构：顶部头像+用户名+LvX 等级标签，菜单项增加左侧图标，优化布局样式 - 新增 API：POST /api/level/checkin、GET /api/level/info
113 lines
3.0 KiB
Go
113 lines
3.0 KiB
Go
package middleware
|
||
|
||
import (
|
||
"net/http"
|
||
|
||
"metazone.cc/metalab/internal/common"
|
||
"metazone.cc/metalab/internal/config"
|
||
"metazone.cc/metalab/internal/session"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// autoCheckIner AuthMiddleware 对自动签到服务的最小依赖
|
||
type autoCheckIner interface {
|
||
CheckIn(userID uint) (checkedIn bool, newExp int, levelUp bool, err error)
|
||
}
|
||
|
||
// AuthMiddleware 认证中间件（结构体模式，持有 SessionManager）
|
||
type AuthMiddleware struct {
|
||
cfg *config.Config
|
||
sessionManager *session.Manager
|
||
levelSvc autoCheckIner
|
||
}
|
||
|
||
// NewAuthMiddleware 构造函数
|
||
func NewAuthMiddleware(cfg *config.Config, sm *session.Manager) *AuthMiddleware {
|
||
return &AuthMiddleware{cfg: cfg, sessionManager: sm}
|
||
}
|
||
|
||
// WithLevelService 链式注入等级服务（用于自动签到）
|
||
func (am *AuthMiddleware) WithLevelService(svc autoCheckIner) *AuthMiddleware {
|
||
am.levelSvc = svc
|
||
return am
|
||
}
|
||
|
||
// Required 登录认证中间件：读 session cookie → 验证会话 → 注入用户信息
|
||
// 验证失败 → 清除 cookie → 返回 401
|
||
func (am *AuthMiddleware) Required() gin.HandlerFunc {
|
||
return func(c *gin.Context) {
|
||
sid, err := c.Cookie(common.SessionCookieName)
|
||
if err != nil || sid == "" {
|
||
common.ClearSessionCookie(c, am.cfg)
|
||
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
|
||
"success": false, "message": "登录已过期，请重新登录",
|
||
})
|
||
return
|
||
}
|
||
|
||
s, err := am.sessionManager.Validate(sid)
|
||
if err != nil || s == nil {
|
||
common.ClearSessionCookie(c, am.cfg)
|
||
c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{
|
||
"success": false, "message": "登录已过期，请重新登录",
|
||
})
|
||
return
|
||
}
|
||
|
||
injectSessionContext(c, s)
|
||
am.tryAutoCheckIn(c, s)
|
||
c.Next()
|
||
}
|
||
}
|
||
|
||
// Optional 可选认证：已登录则注入用户信息，未登录也放行
|
||
func (am *AuthMiddleware) Optional() gin.HandlerFunc {
|
||
return func(c *gin.Context) {
|
||
sid, err := c.Cookie(common.SessionCookieName)
|
||
if err != nil || sid == "" {
|
||
c.Next()
|
||
return
|
||
}
|
||
|
||
s, err := am.sessionManager.Validate(sid)
|
||
if err != nil || s == nil {
|
||
common.ClearSessionCookie(c, am.cfg)
|
||
c.Next()
|
||
return
|
||
}
|
||
|
||
injectSessionContext(c, s)
|
||
am.tryAutoCheckIn(c, s)
|
||
c.Next()
|
||
}
|
||
}
|
||
|
||
// tryAutoCheckIn 尝试自动签到（静默失败，不影响主流程）
|
||
// 若签到成功，同步更新 gin context 中的 exp，确保页面渲染获取最新等级
|
||
func (am *AuthMiddleware) tryAutoCheckIn(c *gin.Context, s *session.Session) {
|
||
if am.levelSvc == nil || s == nil {
|
||
return
|
||
}
|
||
checkedIn, newExp, _, _ := am.levelSvc.CheckIn(s.UserID)
|
||
if checkedIn {
|
||
s.Exp = newExp
|
||
_ = am.sessionManager.UpdateSession(s)
|
||
c.Set("exp", newExp)
|
||
}
|
||
}
|
||
|
||
// injectSessionContext 将会话中的用户信息注入 gin context
|
||
func injectSessionContext(c *gin.Context, s *session.Session) {
|
||
if s == nil {
|
||
return
|
||
}
|
||
c.Set("uid", s.UserID)
|
||
c.Set("email", s.Email)
|
||
c.Set("username", s.Username)
|
||
c.Set("avatar", s.Avatar)
|
||
c.Set("role", s.Role)
|
||
c.Set("exp", s.Exp)
|
||
c.Set("sid", s.ID)
|
||
}
|