common/middleware/module_tenant_check.go

package middleware

import (
	"context"
	"encoding/json"
	"fmt"
	"gitea.redpowerfuture.com/red-future/common/beans"
	commonHttp "gitea.redpowerfuture.com/red-future/common/http"
	"gitea.redpowerfuture.com/red-future/common/utils"
	"github.com/gogf/gf/v2/database/gredis"
	"github.com/gogf/gf/v2/frame/g"
	"github.com/gogf/gf/v2/net/ghttp"
	"github.com/gogf/gf/v2/os/gtime"
	"github.com/gogf/gf/v2/util/gconv"
	"net/http"
	"time"
)

func ModuleTenantCheck(r *ghttp.Request) {
	//将 http.Header 转换为 map[string]string
	headers := make(map[string]string)
	for k, v := range r.Request.Header {
		if len(v) > 0 {
			headers[k] = v[0]
		}
	}

	// 检查是否是超级管理员
	isSuperAdmin, err := IsSuperAdmin(r.Context(), headers)
	if err != nil {
		SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, err)
	}
	// 如果是超级管理员，则不进行模块租户检查
	if isSuperAdmin || r.Request.RequestURI == "/asset/getAssetAndSku?assetId=696b4acd1be1c8b76c4b4c15" {
		r.Middleware.Next()
		return
	}
	getUserInfo, err := utils.GetUserInfo(r.Context())
	if err != nil {
		SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, err)
	}
	exit := gconv.Int64(time.Minute * 1)
	getEX, err := g.Redis("test").GetEX(r.Context(), fmt.Sprintf("module_tenant:tenantId-%v", getUserInfo.TenantId), gredis.GetEXOption{
		TTLOption: gredis.TTLOption{
			EX: &exit,
		},
	})
	if err != nil {
		SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, err)
	}
	// 获取模块key
	moduleKey := g.Cfg().MustGet(context.Background(), "server.name").String()
	if !g.IsEmpty(getEX.String()) {
		list := new(beans.ModuleTenant)
		if err = json.Unmarshal(getEX.Bytes(), &list); err != nil {
			SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, err)
		}
		// 缓存中有数据，检查是否过期
		if !g.IsEmpty(list.ExpireAt) {
			gt1 := gtime.New(time.Now())
			gt2 := gtime.New(list.ExpireAt)
			if !gt1.Before(gt2) {
				SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, "功能模块已到期，请续期后再使用")
			} else {
				if list.CertificationStatus != 2 {
					SetResponseInfo(r.Context(), r, http.StatusPreconditionRequired, "功能模块未认证通过，请认证后再使用")
				}
			}
		} else {
			SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, "您未开通此功能模块，请开通后再使用")
		}
	} else {
		checkRes := new(beans.ModuleTenantCheckRes)
		checkReq := beans.ModuleTenantCheckReq{
			ModuleKey: moduleKey,
			TenantId:  gconv.Uint64(getUserInfo.TenantId),
		}
		checkRes, err = Check(r.Context(), headers, checkReq)
		if err != nil {
			SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, err)
		}
		// 根据检查结果判断是否允许访问
		if !checkRes.Status {
			SetResponseInfo(r.Context(), r, http.StatusPaymentRequired, checkRes.Message)
		} else {
			if !checkRes.CertificationStatus {
				SetResponseInfo(r.Context(), r, http.StatusPreconditionRequired, checkRes.Message)
			}
		}
	}

	r.Middleware.Next() // 继续执行后续中间件和路由处理
}

// SetResponseInfo 设置响应信息
func SetResponseInfo(ctx context.Context, r *ghttp.Request, code int, message any) {
	_ = ctx
	r.Response.WriteJsonExit(map[string]interface{}{
		"success": false,
		"code":    code,
		"message": fmt.Sprintf("服务不可用：%s", message),
	})
	r.Exit()
}

// Check 调用admin-go服务检查模块开通状态
func Check(ctx context.Context, headerMap map[string]string, req beans.ModuleTenantCheckReq) (res *beans.ModuleTenantCheckRes, err error) {
	if err = commonHttp.Get(ctx, "admin-go/api/v1/system/moduleTenant/check", headerMap, &res,
		"moduleKey", req.ModuleKey,
		"tenantId", req.TenantId,
	); err != nil {
		return
	}
	return
}

// IsSuperAdmin 调用admin-go服务检查是否是超级管理员
func IsSuperAdmin(ctx context.Context, headerMap map[string]string) (res bool, err error) {
	if err = commonHttp.Get(ctx, "admin-go/api/v1/system/user/checkIsSuperAdmin", headerMap, &res); err != nil {
		return
	}
	return
}