base_auth.go 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149
  1. package controllers
  2. import (
  3. "encoding/json"
  4. "eta/eta_hub/models"
  5. "eta/eta_hub/utils"
  6. "fmt"
  7. "github.com/beego/beego/v2/server/web"
  8. "net/http"
  9. "net/url"
  10. )
  11. type BaseAuthController struct {
  12. web.Controller
  13. }
  14. func (this *BaseAuthController) Prepare() {
  15. fmt.Println("enter prepare")
  16. method := this.Ctx.Input.Method()
  17. uri := this.Ctx.Input.URI()
  18. fmt.Println("Url:", uri)
  19. if method != "HEAD" {
  20. //校验签名
  21. nonce := this.Ctx.Input.Header("nonce")
  22. timestamp := this.Ctx.Input.Header("timestamp")
  23. appid := this.Ctx.Input.Header("appid")
  24. signature := this.Ctx.Input.Header("signature")
  25. if nonce == "" {
  26. errMsg := "随机字符串不能为空"
  27. this.JSON(models.BaseResponse{Ret: 400, Msg: "", ErrMsg: errMsg}, false, false)
  28. this.StopRun()
  29. return
  30. }
  31. if timestamp == "" {
  32. errMsg := "时间戳不能为空"
  33. this.JSON(models.BaseResponse{Ret: 400, Msg: "", ErrMsg: errMsg}, false, false)
  34. this.StopRun()
  35. return
  36. }
  37. if appid != utils.AppId {
  38. errMsg := "商家AppId错误,请核查"
  39. this.JSON(models.BaseResponse{Ret: 400, Msg: "", ErrMsg: errMsg}, false, false)
  40. this.StopRun()
  41. return
  42. }
  43. checkSign := utils.GetSign(nonce, timestamp)
  44. if signature != checkSign {
  45. errMsg := "签名错误"
  46. this.JSON(models.BaseResponse{Ret: 401, Msg: "", ErrMsg: errMsg}, false, false)
  47. this.StopRun()
  48. return
  49. }
  50. if method != "GET" && method != "POST" {
  51. errMsg := "无效的请求方式"
  52. this.JSON(models.BaseResponse{Ret: 501, Msg: "", ErrMsg: errMsg}, false, false)
  53. this.StopRun()
  54. return
  55. }
  56. } else {
  57. this.JSON(models.BaseResponse{Ret: 500, Msg: "系统异常,请联系客服!", ErrMsg: "method:" + method}, false, false)
  58. this.StopRun()
  59. return
  60. }
  61. }
  62. func (c *BaseAuthController) ServeJSON(encoding ...bool) {
  63. //所有请求都做这么个处理吧,目前这边都是做编辑、刷新逻辑处理(新增的话,并没有指标id,不会有影响)
  64. var (
  65. hasIndent = false
  66. hasEncoding = false
  67. )
  68. if web.BConfig.RunMode == web.PROD {
  69. hasIndent = false
  70. }
  71. if len(encoding) > 0 && encoding[0] == true {
  72. hasEncoding = true
  73. }
  74. if c.Data["json"] == nil {
  75. //go utils.SendEmail("异常提醒:", "接口:"+"URI:"+c.Ctx.Input.URI()+";无返回值", utils.EmailSendToUsers)
  76. //body := "接口:" + "URI:" + c.Ctx.Input.URI() + ";无返回值"
  77. //go alarm_msg.SendAlarmMsg(body, 1)
  78. return
  79. }
  80. baseRes := c.Data["json"].(*models.BaseResponse)
  81. if baseRes != nil && baseRes.Ret != 408 {
  82. //body, _ := json.Marshal(baseRes)
  83. //var requestBody string
  84. //method := c.Ctx.Input.Method()
  85. //if method == "GET" {
  86. // requestBody = c.Ctx.Request.RequestURI
  87. //} else {
  88. // requestBody, _ = url.QueryUnescape(string(c.Ctx.Input.RequestBody))
  89. //}
  90. //if baseRes.Ret != 200 && baseRes.IsSendEmail {
  91. // go utils.SendEmail(utils.APP_NAME_CN+"【"+utils.RunMode+"】"+"失败提醒", "URI:"+c.Ctx.Input.URI()+"<br/> "+"Params"+requestBody+" <br/>"+"ErrMsg:"+baseRes.ErrMsg+";<br/>Msg:"+baseRes.Msg+";<br/> Body:"+string(body)+"<br/>", utils.EmailSendToUsers)
  92. //}
  93. // 记录错误日志, 并清掉错误信息避免暴露给外部
  94. if baseRes.ErrMsg != "" {
  95. utils.FileLog.Info(baseRes.ErrMsg)
  96. baseRes.ErrMsg = ""
  97. }
  98. }
  99. c.JSON(c.Data["json"], hasIndent, hasEncoding)
  100. }
  101. func (c *BaseAuthController) JSON(data interface{}, hasIndent bool, coding bool) error {
  102. c.Ctx.Output.Header("Content-Type", "application/json; charset=utf-8")
  103. var content []byte
  104. var err error
  105. if hasIndent {
  106. content, err = json.MarshalIndent(data, "", " ")
  107. } else {
  108. content, err = json.Marshal(data)
  109. }
  110. if err != nil {
  111. http.Error(c.Ctx.Output.Context.ResponseWriter, err.Error(), http.StatusInternalServerError)
  112. return err
  113. }
  114. ip := c.Ctx.Input.IP()
  115. requestBody, err := url.QueryUnescape(string(c.Ctx.Input.RequestBody))
  116. if err != nil {
  117. requestBody = string(c.Ctx.Input.RequestBody)
  118. }
  119. if requestBody == "" {
  120. requestBody = c.Ctx.Input.URI()
  121. }
  122. c.logUri(content, requestBody, ip)
  123. if coding {
  124. content = []byte(utils.StringsToJSON(string(content)))
  125. }
  126. return c.Ctx.Output.Body(content)
  127. }
  128. func (c *BaseAuthController) logUri(respContent []byte, requestBody, ip string) {
  129. var reqData interface{}
  130. err := json.Unmarshal([]byte(requestBody), &reqData)
  131. if err != nil {
  132. utils.ApiLog.Info("uri:%s, requestBody:%s, ip:%s", c.Ctx.Input.URI(), requestBody, ip)
  133. } else {
  134. utils.ApiLog.Info("uri:%s, requestBody:%s, ip:%s", c.Ctx.Input.URI(), requestBody, ip)
  135. }
  136. return
  137. }