Golang实现Web接口权限控制方法

func AuthMiddleware(next http.HandlerFunc) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        tokenStr := r.Header.Get("Authorization")
        if tokenStr == "" {
            http.Error(w, "未提供Token", http.StatusUnauthorized)
            return
        }

        // 去除Bearer前缀
        tokenStr = strings.TrimPrefix(tokenStr, "Bearer ")

        // 解析JWT
        token, err := jwt.Parse(tokenStr, func(token *jwt.Token) (interface{}, error) {
            return []byte("your-secret-key"), nil
        })
        if err != nil || !token.Valid {
            http.Error(w, "无效或过期的Token", http.StatusUnauthorized)
            return
        }

        // 提取用户信息，可存入上下文
        if claims, ok := token.Claims.(jwt.MapClaims); ok {
            ctx := context.WithValue(r.Context(), "userID", claims["id"])
            next.ServeHTTP(w, r.WithContext(ctx))
            return
        }

        http.Error(w, "解析Token失败", http.StatusUnauthorized)
    }
}

func AdminOnly(next http.HandlerFunc) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        userID := r.Context().Value("userID").(string)
        
        // 查询用户角色（可从数据库或缓存获取）
        role := getUserRole(userID) // 伪代码
        if role != "admin" {
            http.Error(w, "权限不足", http.StatusForbidden)
            return
        }
        next.ServeHTTP(w, r)
    }
}

func APIKeyAuth(next http.HandlerFunc) http.HandlerFunc {
    validKey := "your-api-key-123"
    return func(w http.ResponseWriter, r *http.Request) {
        key := r.Header.Get("X-API-Key")
        if key != validKey {
            http.Error(w, "无效API Key", http.StatusUnauthorized)
            return
        }
        next.ServeHTTP(w, r)
    }
}

func JWTAuth() gin.HandlerFunc {
    return func(c *gin.Context) {
        token := c.GetHeader("Authorization")
        // 验证逻辑同上...
        if valid {
            c.Next()
        } else {
            c.AbortWithStatusJSON(401, gin.H{"error": "未授权"})
        }
    }
}

// 使用
r.GET("/admin", JWTAuth(), AdminHandler)