zwxi 5 kuukautta sitten
vanhempi
commit
9fdf1e5404
2 muutettua tiedostoa jossa 37 lisäystä ja 1 poistoa
  1. 36 0
      middleware/check_cygx_auth.go
  2. 1 1
      routers/voice_broadcast.go

+ 36 - 0
middleware/check_cygx_auth.go

@@ -0,0 +1,36 @@
+package middleware
+
+import (
+	"github.com/gin-gonic/gin"
+	"hongze/hongze_yb/controller/response"
+	"hongze/hongze_yb/services/company"
+	"hongze/hongze_yb/services/user"
+	"hongze/hongze_yb/utils"
+)
+
+// CheckCygxAuth 如果带thirdCode就可以看,如果有权限也给其他权限
+func CheckCygxAuth() gin.HandlerFunc {
+
+	return func(c *gin.Context) {
+
+		userInfo := user.GetInfoByClaims(c)
+
+		thirdCodeEncrypt := c.Request.Header.Get("thirdCode")
+		thirdCode := utils.DesBase64Encrypt([]byte(thirdCodeEncrypt))
+		if string(thirdCode) == "" {
+			ok, checkInfo, _, err := company.CheckBaseFiccPermission(userInfo.CompanyID, int(userInfo.UserID))
+			if err != nil {
+				response.FailMsg("用户权限验证失败", "CheckBaseAuth-用户权限验证失败"+err.Error(), c)
+				c.Abort()
+				return
+			}
+			if !ok {
+				response.AuthError(checkInfo, "暂无权限", c)
+				c.Abort()
+				return
+			}
+		}
+
+		c.Next()
+	}
+}

+ 1 - 1
routers/voice_broadcast.go

@@ -15,7 +15,7 @@ func InitVoiceBroadcast(r *gin.Engine) {
 	rGroup.GET("/delete", voice_broadcast.DelBroadcast)
 	rGroup.POST("/statistics/add", voice_broadcast.AddStatistics)
 	// 权限校验
-	rGroup2 := r.Group("api/voice/broadcast").Use(middleware.Token(), middleware.CheckBaseAuth())
+	rGroup2 := r.Group("api/voice/broadcast").Use(middleware.Token(), middleware.CheckCygxAuth())
 	rGroup2.POST("/list", voice_broadcast.BroadcastList)
 	rGroup2.GET("/detail", voice_broadcast.BroadcastDetail)
 	rGroup2.POST("/msg_send", voice_broadcast.MsgSend)