-
Notifications
You must be signed in to change notification settings - Fork 0
/
main.go
103 lines (90 loc) · 2.19 KB
/
main.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
package main
import (
"context"
"fmt"
"rpcServer/controller"
"golang.org/x/net/trace"
"google.golang.org/grpc"
"google.golang.org/grpc/codes"
"google.golang.org/grpc/credentials"
"google.golang.org/grpc/grpclog"
"google.golang.org/grpc/metadata"
"google.golang.org/grpc/reflection"
"google.golang.org/grpc/status"
"net"
"net/http"
pb "rpcServer/pb"
)
const (
port = ":50051"
)
// auth 验证Token
func auth(ctx context.Context) error {
md, ok := metadata.FromIncomingContext(ctx)
if !ok {
return status.Errorf(codes.Unauthenticated, "无Token认证信息")
}
var (
appuid string
appkey string
)
if val, ok := md["appuid"]; ok {
appuid = val[0]
}
if val, ok := md["appkey"]; ok {
appkey = val[0]
}
if appuid != "100" || appkey != "i am key" {
return status.Errorf(codes.Unauthenticated, "Token认证失败")
}
return nil
}
func main() {
grpc.EnableTracing = true
var (
opts []grpc.ServerOption
)
lis, err := net.Listen("tcp", port)
if err != nil {
grpclog.Fatal(err)
}
// 添加TLS认证
creds, err := credentials.NewServerTLSFromFile("./ssl/server.pem", "./ssl/server.key")
if err != nil {
grpclog.Fatal(err)
}
opts = append(opts, grpc.Creds(creds))
// 注册interceptor
var interceptor grpc.UnaryServerInterceptor
interceptor = func(ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (resp interface{}, err error) {
err = auth(ctx)
if err != nil {
return
}
// 继续处理其他请求
return handler(ctx, req)
}
opts = append(opts, grpc.UnaryInterceptor(interceptor))
s := grpc.NewServer(opts...)
// 注册 GreeterService
pb.RegisterGreeterServer(s, &controller.Server{})
// 注册 UserService
pb.RegisterUserServer(s, &controller.User{})
pb.RegisterStreamServiceServer(s, &controller.StreamService{})
// Register reflection service on gRPC server.
reflection.Register(s)
fmt.Printf("Listen on %s with TLS\n", port)
// 开启trace
go startTrace()
err = s.Serve(lis)
if err != nil {
grpclog.Fatal(err)
}
}
func startTrace() {
trace.AuthRequest = func(req *http.Request) (any, sensitive bool) {
return true, true
}
go http.ListenAndServe(":50052", nil)
fmt.Println("Trace listen on 50052")
}