/
rules.go
95 lines (82 loc) · 1.78 KB
/
rules.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
package auth
import (
"net/http"
"os"
"strings"
"github.com/gocarina/gocsv"
)
type rules struct {
resources map[string]*Resource
}
// gocsv 无法下载使用
func NewRules(params ...interface{}) (Rules, error) {
r := &rules{
resources: make(map[string]*Resource),
}
resFileName := "./config/res.csv"
if len(params) > 0 {
rf, ok := params[0].(string)
if ok {
resFileName = rf
}
}
resFile, err := os.OpenFile(resFileName, os.O_RDWR|os.O_CREATE, os.ModePerm)
if err != nil {
return nil, err
}
defer resFile.Close()
resources := make([]*Resource, 0)
if err := gocsv.Unmarshal(resFile, &resources); err != nil {
return nil, err
}
for _, res := range resources {
r.resources[res.ID] = res
}
return r, nil
}
func (r *rules) GetRes(id string) *Resource {
return r.resources[id]
}
func (r *rules) Resources(domains ...string) ([]*Resource, error) {
result := make([]*Resource, 0)
for _, res := range r.resources {
if len(domains) == 0 {
result = append(result, res)
} else {
for _, d := range domains {
dd := strings.Trim(res.Domain, " ")
if strings.EqualFold(d, dd) {
result = append(result, res)
}
}
}
}
return result, nil
}
func (r *rules) VerifyRequest(req *http.Request) (bool, error) {
if len(r.resources) > 0 {
user, ok := AuthUser(req.Context())
if ok {
for _, res := range r.resources {
if IsPatternMatch(strings.ToLower(req.RequestURI),
strings.ToLower(res.EndPoint)) {
return r.Verify(user, res)
}
}
}
}
return false, nil
}
func (r *rules) Verify(user *Principal, res *Resource) (bool, error) {
if len(user.Scopes) > 0 {
if user.Scopes[0] == "*" {
return true, nil
}
for _, sc := range user.Scopes {
if strings.EqualFold(sc, res.ID) {
return true, nil
}
}
}
return false, nil
}