mirror of
https://gitee.com/samwaf/SamWaf.git
synced 2025-12-06 14:59:18 +08:00
255 lines
8.0 KiB
Go
255 lines
8.0 KiB
Go
package waf_service
|
||
|
||
import (
|
||
"SamWaf/common/uuid"
|
||
"SamWaf/customtype"
|
||
"SamWaf/enums"
|
||
"SamWaf/global"
|
||
"SamWaf/model"
|
||
"SamWaf/model/baseorm"
|
||
"errors"
|
||
"time"
|
||
)
|
||
|
||
type WafTokenInfoService struct{}
|
||
|
||
var WafTokenInfoServiceApp = new(WafTokenInfoService)
|
||
|
||
func (receiver *WafTokenInfoService) AddApi(loginAccount string, AccessToken string, LoginIp string) *model.TokenInfo {
|
||
|
||
var bean = &model.TokenInfo{
|
||
BaseOrm: baseorm.BaseOrm{
|
||
Id: uuid.GenUUID(),
|
||
USER_CODE: global.GWAF_USER_CODE,
|
||
Tenant_ID: global.GWAF_TENANT_ID,
|
||
CREATE_TIME: customtype.JsonTime(time.Now()),
|
||
UPDATE_TIME: customtype.JsonTime(time.Now()),
|
||
},
|
||
LoginAccount: loginAccount,
|
||
AccessToken: AccessToken,
|
||
LoginIp: LoginIp,
|
||
LoginType: "web", // 默认为web类型
|
||
}
|
||
global.GWAF_LOCAL_DB.Create(bean)
|
||
mod := receiver.GetInfoByLoginAccount(loginAccount)
|
||
return &mod
|
||
}
|
||
|
||
// AddApiWithFingerprint 添加带指纹的token信息
|
||
func (receiver *WafTokenInfoService) AddApiWithFingerprint(loginAccount string, AccessToken string, LoginIp string, deviceFingerprint string) *model.TokenInfo {
|
||
|
||
var bean = &model.TokenInfo{
|
||
BaseOrm: baseorm.BaseOrm{
|
||
Id: uuid.GenUUID(),
|
||
USER_CODE: global.GWAF_USER_CODE,
|
||
Tenant_ID: global.GWAF_TENANT_ID,
|
||
CREATE_TIME: customtype.JsonTime(time.Now()),
|
||
UPDATE_TIME: customtype.JsonTime(time.Now()),
|
||
},
|
||
LoginAccount: loginAccount,
|
||
AccessToken: AccessToken,
|
||
LoginIp: LoginIp,
|
||
DeviceFingerprint: deviceFingerprint,
|
||
LoginType: "web", // 默认为web类型
|
||
}
|
||
global.GWAF_LOCAL_DB.Create(bean)
|
||
mod := receiver.GetInfoByLoginAccount(loginAccount)
|
||
return &mod
|
||
}
|
||
|
||
// AddApiWithFingerprintAndType 添加带指纹和登录类型的token信息
|
||
func (receiver *WafTokenInfoService) AddApiWithFingerprintAndType(loginAccount string, AccessToken string, LoginIp string, deviceFingerprint string, loginType string) *model.TokenInfo {
|
||
|
||
var bean = &model.TokenInfo{
|
||
BaseOrm: baseorm.BaseOrm{
|
||
Id: uuid.GenUUID(),
|
||
USER_CODE: global.GWAF_USER_CODE,
|
||
Tenant_ID: global.GWAF_TENANT_ID,
|
||
CREATE_TIME: customtype.JsonTime(time.Now()),
|
||
UPDATE_TIME: customtype.JsonTime(time.Now()),
|
||
},
|
||
LoginAccount: loginAccount,
|
||
AccessToken: AccessToken,
|
||
LoginIp: LoginIp,
|
||
DeviceFingerprint: deviceFingerprint,
|
||
LoginType: loginType,
|
||
}
|
||
global.GWAF_LOCAL_DB.Create(bean)
|
||
mod := receiver.GetInfoByLoginAccountAndType(loginAccount, loginType)
|
||
return &mod
|
||
}
|
||
|
||
func (receiver *WafTokenInfoService) CheckIsExistByLoginAccountApi(loginAccount string) error {
|
||
return global.GWAF_LOCAL_DB.First(&model.TokenInfo{}, "login_account = ? ", loginAccount).Error
|
||
}
|
||
func (receiver *WafTokenInfoService) ModifyApi(loginAccount string, AccessToken string, LoginIp string) error {
|
||
var bean model.Account
|
||
global.GWAF_LOCAL_DB.Where("login_account = ? ,access_token = ? ", loginAccount, AccessToken).Find(&bean)
|
||
if bean.Id == "" {
|
||
return errors.New("当前数据不存在")
|
||
}
|
||
beanMap := map[string]interface{}{
|
||
"login_ip": LoginIp,
|
||
"UPDATE_TIME": customtype.JsonTime(time.Now()),
|
||
}
|
||
err := global.GWAF_LOCAL_DB.Model(model.Account{}).Where("login_account = ? ,access_token = ? ", loginAccount, AccessToken).Updates(beanMap).Error
|
||
|
||
return err
|
||
}
|
||
|
||
/*
|
||
*
|
||
通过登录account获取账号信息
|
||
*/
|
||
func (receiver *WafTokenInfoService) GetInfoByLoginAccount(loginAccount string) model.TokenInfo {
|
||
var bean model.TokenInfo
|
||
global.GWAF_LOCAL_DB.Where("login_account=? ", loginAccount).Limit(1).Find(&bean)
|
||
return bean
|
||
}
|
||
|
||
// GetAllTokenInfoByLoginAccount 通过登录account获取账号信息
|
||
func (receiver *WafTokenInfoService) GetAllTokenInfoByLoginAccount(loginAccount string) []model.TokenInfo {
|
||
var bean []model.TokenInfo
|
||
global.GWAF_LOCAL_DB.Where("login_account=? ", loginAccount).Find(&bean)
|
||
return bean
|
||
}
|
||
|
||
// GetInfoByLoginAccountAndType 通过登录account和类型获取账号信息
|
||
func (receiver *WafTokenInfoService) GetInfoByLoginAccountAndType(loginAccount string, loginType string) model.TokenInfo {
|
||
var bean model.TokenInfo
|
||
global.GWAF_LOCAL_DB.Where("login_account=? AND login_type=? ", loginAccount, loginType).Limit(1).Find(&bean)
|
||
return bean
|
||
}
|
||
|
||
// GetAllTokenInfoByLoginAccountAndType 通过登录account和类型获取所有账号信息
|
||
func (receiver *WafTokenInfoService) GetAllTokenInfoByLoginAccountAndType(loginAccount string, loginType string) []model.TokenInfo {
|
||
var bean []model.TokenInfo
|
||
global.GWAF_LOCAL_DB.Where("login_account=? AND login_type=? ", loginAccount, loginType).Find(&bean)
|
||
return bean
|
||
}
|
||
|
||
/*
|
||
*
|
||
获取一个可用的token TODO 将来应该是一个
|
||
*/
|
||
func (receiver *WafTokenInfoService) GetOneAvailableInfo() model.TokenInfo {
|
||
var bean model.TokenInfo
|
||
global.GWAF_LOCAL_DB.Limit(1).Find(&bean)
|
||
return bean
|
||
}
|
||
|
||
/*
|
||
*
|
||
通过登录access_token获取账号信息
|
||
*/
|
||
func (receiver *WafTokenInfoService) GetInfoByAccessToken(accessToken string) model.TokenInfo {
|
||
var bean model.TokenInfo
|
||
global.GWAF_LOCAL_DB.Where("access_token=? ", accessToken).Find(&bean)
|
||
return bean
|
||
}
|
||
|
||
/*
|
||
*
|
||
删除状态
|
||
*/
|
||
func (receiver *WafTokenInfoService) DelApi(loginAccount string, AccessToken string) error {
|
||
var bean model.TokenInfo
|
||
err := global.GWAF_LOCAL_DB.Where("login_account = ? and access_token = ? ", loginAccount, AccessToken).First(&bean).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
err = global.GWAF_LOCAL_DB.Where("login_account = ? and access_token = ? ", loginAccount, AccessToken).Delete(model.TokenInfo{}).Error
|
||
return err
|
||
}
|
||
|
||
/*
|
||
*
|
||
通过账号删除所有关联状态
|
||
*/
|
||
func (receiver *WafTokenInfoService) DelApiByAccount(loginAccount string) error {
|
||
var bean model.TokenInfo
|
||
err := global.GWAF_LOCAL_DB.Where("login_account = ?", loginAccount).First(&bean).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
err = global.GWAF_LOCAL_DB.Where("login_account = ?", loginAccount).Delete(model.TokenInfo{}).Error
|
||
return err
|
||
}
|
||
|
||
/*
|
||
*
|
||
通过账号和登录类型删除关联状态
|
||
*/
|
||
func (receiver *WafTokenInfoService) DelApiByAccountAndType(loginAccount string, loginType string) error {
|
||
var bean model.TokenInfo
|
||
err := global.GWAF_LOCAL_DB.Where("login_account = ? AND login_type = ?", loginAccount, loginType).First(&bean).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
err = global.GWAF_LOCAL_DB.Where("login_account = ? AND login_type = ?", loginAccount, loginType).Delete(model.TokenInfo{}).Error
|
||
return err
|
||
}
|
||
|
||
/*
|
||
* 检测所有的token是否过期，没有过期就重新加载到cache
|
||
*/
|
||
func (receiver *WafTokenInfoService) ReloadAllValidTokensToCache() error {
|
||
var tokens []model.TokenInfo
|
||
// 获取所有token信息
|
||
err := global.GWAF_LOCAL_DB.Find(&tokens).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
// 当前时间
|
||
now := time.Now()
|
||
|
||
// 遍历所有token
|
||
for _, token := range tokens {
|
||
// 检查token是否过期
|
||
// 假设token的过期时间存储在UPDATE_TIME字段中，并且有一个固定的过期时间
|
||
expireTime := time.Time(token.UPDATE_TIME).Add(time.Duration(global.GCONFIG_RECORD_TOKEN_EXPIRE_MINTUTES) * time.Minute)
|
||
|
||
// 如果token没有过期，则重新加载到缓存中
|
||
if expireTime.After(now) {
|
||
// 将token信息存入缓存
|
||
global.GCACHE_WAFCACHE.SetWithTTl(
|
||
enums.CACHE_TOKEN+token.AccessToken,
|
||
token,
|
||
time.Duration(global.GCONFIG_RECORD_TOKEN_EXPIRE_MINTUTES)*time.Minute,
|
||
)
|
||
}
|
||
}
|
||
|
||
return nil
|
||
}
|
||
|
||
// 根据数据库中的特定token信息重新加载到缓存
|
||
func (receiver *WafTokenInfoService) ReloadSpecificTokenToCache(tokenId string) error {
|
||
var token model.TokenInfo
|
||
// 根据ID获取token信息
|
||
err := global.GWAF_LOCAL_DB.Where("id = ?", tokenId).First(&token).Error
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
// 当前时间
|
||
now := time.Now()
|
||
|
||
// 检查token是否过期
|
||
expireTime := time.Time(token.UPDATE_TIME).Add(time.Duration(global.GCONFIG_RECORD_TOKEN_EXPIRE_MINTUTES) * time.Minute)
|
||
|
||
// 如果token没有过期，则重新加载到缓存中
|
||
if expireTime.After(now) {
|
||
// 将token信息存入缓存
|
||
global.GCACHE_WAFCACHE.SetWithTTl(
|
||
enums.CACHE_TOKEN+token.AccessToken,
|
||
token,
|
||
time.Duration(global.GCONFIG_RECORD_TOKEN_EXPIRE_MINTUTES)*time.Minute,
|
||
)
|
||
return nil
|
||
}
|
||
|
||
return errors.New("token已过期")
|
||
}
|