Merge pull request #13 from dingdinglz/dev

✨ feat(登录): 完成webui登录功能

Author: dingdinglz

appconfig/config.go

@@ -30,4 +30,6 @@ func ConfigInit() {
 	tool.DictoryCreateN(filepath.Join(rootPath, "data", "plugin"))
 	tool.DictoryCreateN(filepath.Join(rootPath, "data", "plugin", "source"))
 	tool.DictoryCreateN(filepath.Join(rootPath, "data", "plugin"))
+
+	JWTSecret = GenerateRandString(10)
 }

appconfig/global.go

@@ -10,6 +10,7 @@ var (
 	AppConfigVar AppConfig
 	Version      string = "v2 beta"
 	BotConfigVar BotConfig
+	JWTSecret    string
 )
 
 type AppConfig struct {

appconfig/tool.go

@@ -0,0 +1,15 @@
+package appconfig
+
+import (
+	"math/rand"
+)
+
+// 生成一个指定长度的随机字符串，内容包括26个字母和10个数字
+func GenerateRandString(n int) string {
+	var letterRunes = []rune("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789")
+	b := make([]rune, n)
+	for i := range b {
+		b[i] = letterRunes[rand.Intn(len(letterRunes))]
+	}
+	return string(b)
+}

appconfig/tool_test.go

@@ -0,0 +1,10 @@
+package appconfig
+
+import (
+	"fmt"
+	"testing"
+)
+
+func TestGenerateRandString(t *testing.T) {
+	fmt.Println(GenerateRandString(10))
+}

database/init.go

@@ -22,7 +22,7 @@ func DatabaseInit() {
 		tool.ErrorOut("database", "open error", err)
 		panic(err.Error())
 	}
-	DB.AutoMigrate(&KeyWordTable{}, &OpenTable{}, &StopTable{}, &MessageTable{}, &PluginData{}, &StarTable{}, &GithubHookTable{})
+	DB.AutoMigrate(&KeyWordTable{}, &OpenTable{}, &StopTable{}, &MessageTable{}, &PluginData{}, &StarTable{}, &GithubHookTable{}, &UserTable{})
 
 	// 清空message表的内容，message表用于存seq与message对应，便于取撤回内容
 	DB.Delete(&MessageTable{}, "1=1")

database/tables.go

@@ -65,3 +65,13 @@ type GithubHookTable struct {
 func (GithubHookTable) TableName() string {
 	return "github"
 }
+
+type UserTable struct {
+	ID       uint
+	Username string
+	Password string
+}
+
+func (UserTable) TableName() string {
+	return "user"
+}

database/tool.go

@@ -0,0 +1,13 @@
+package database
+
+import (
+	"crypto/md5"
+	"fmt"
+	"io"
+)
+
+func md5Generate(text string) string {
+	h := md5.New()
+	io.WriteString(h, text)
+	return fmt.Sprintf("%x", h.Sum(nil))
+}

database/user.go

@@ -0,0 +1,29 @@
+package database
+
+import "errors"
+
+func UserExist(username string) bool {
+	var i int64
+	DB.Model(&UserTable{}).Where("username = ?", username).Count(&i)
+	return i != 0
+}
+
+func UserNew(username string, password string) error {
+	if UserExist(username) {
+		return errors.New("用户已存在")
+	}
+	var i UserTable
+	i.Username = username
+	i.Password = md5Generate(password)
+	DB.Create(&i)
+	return nil
+}
+
+func UserLogin(username string, password string) bool {
+	if !UserExist(username) {
+		return false
+	}
+	var i UserTable
+	DB.Model(&UserTable{}).Where("username = ?", username).First(&i)
+	return i.Password == md5Generate(password)
+}

go.mod

@@ -21,6 +21,7 @@ require (
 	github.com/go-sql-driver/mysql v1.7.0 // indirect
 	github.com/gofiber/template v1.8.3 // indirect
 	github.com/gofiber/utils v1.1.0 // indirect
+	github.com/golang-jwt/jwt/v5 v5.2.1 // indirect
 	github.com/google/uuid v1.5.0 // indirect
 	github.com/jinzhu/inflection v1.0.0 // indirect
 	github.com/jinzhu/now v1.1.5 // indirect

go.sum

@@ -22,6 +22,8 @@ github.com/gofiber/template/html/v2 v2.1.2 h1:wkK/mYJ3nIhongTkG3t0QgV4ADdgOYJYVS
 github.com/gofiber/template/html/v2 v2.1.2/go.mod h1:E98Z/FzvpaSib06aWEgYk6GXNf3ctoyaJH8yW5ay5ak=
 github.com/gofiber/utils v1.1.0 h1:vdEBpn7AzIUJRhe+CiTOJdUcTg4Q9RK+pEa0KPbLdrM=
 github.com/gofiber/utils v1.1.0/go.mod h1:poZpsnhBykfnY1Mc0KeEa6mSHrS3dV0+oBWyeQmb2e0=
+github.com/golang-jwt/jwt/v5 v5.2.1 h1:OuVbFODueb089Lh128TAcimifWaLhJwVflnrgM17wHk=
+github.com/golang-jwt/jwt/v5 v5.2.1/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/google/uuid v1.5.0 h1:1p67kYwdtXjb0gL0BPiP1Av9wiZPo5A8z2cWkTZ+eyU=
 github.com/google/uuid v1.5.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD/E=

route/formal.go

@@ -106,3 +106,7 @@ func GithubRoute(ctx *fiber.Ctx) error {
 	pageMap["Githubs"] = database.GithubWebhookGetAll()
 	return ctx.Render("github", pageMap, "layout")
 }
+
+func LoginRoute(ctx *fiber.Ctx) error {
+	return ctx.Render("login", GenerateRenderMap("login"))
+}

route/init.go

@@ -5,6 +5,8 @@ import (
 	"os"
 	"path/filepath"
 
+	"github.com/dingdinglz/dingbot/appconfig"
+	"github.com/dingdinglz/dingbot/database"
 	"github.com/dingdinglz/dingbot/tool"
 	"github.com/gofiber/fiber/v2"
 )
@@ -13,6 +15,8 @@ func InitRoute(c *fiber.Ctx) error {
 	port := c.FormValue("port", "")
 	databaseType := c.FormValue("database", "")
 	source := c.FormValue("source", "")
+	user := c.FormValue("username", "")
+	pass := c.FormValue("password", "")
 	if port == "" {
 		return JsonMessage(c, 1, "port不能为空!")
 	}
@@ -22,8 +26,17 @@ func InitRoute(c *fiber.Ctx) error {
 	if source == "" {
 		return JsonMessage(c, 1, "source不能为空!")
 	}
+	if user == "" {
+		return JsonMessage(c, 1, "username不能为空!")
+	}
+	if pass == "" {
+		return JsonMessage(c, 1, "password不能为空!")
+	}
 	configText, _ := json.Marshal(fiber.Map{"port": tool.StringToInt(port), "database": databaseType, "source": source})
 	rootPath, _ := os.Getwd()
 	os.WriteFile(filepath.Join(rootPath, "data", "config.json"), configText, os.ModePerm)
+	appconfig.ConfigInit()
+	database.DatabaseInit()
+	database.UserNew(user, pass)
 	return JsonMessage(c, 0, "ok")
 }

route/jwt.go

@@ -0,0 +1,37 @@
+package route
+
+import (
+	"time"
+
+	"github.com/dingdinglz/dingbot/appconfig"
+	"github.com/golang-jwt/jwt/v5"
+)
+
+type UserJWTModel struct {
+	Username string
+	jwt.RegisteredClaims
+}
+
+// jwtUserGenerate 生成jwt
+func jwtUserGenerate(user string) string {
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, UserJWTModel{
+		user,
+		jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(time.Now().Add(time.Hour * 24)),
+		},
+	})
+	t, _ := token.SignedString([]byte(appconfig.JWTSecret))
+	return t
+}
+
+// jwtUserParse 解析jwt
+func jwtUserParse(tokenString string) (string, bool) {
+	tokenAfter, e := jwt.ParseWithClaims(tokenString, &UserJWTModel{}, func(token *jwt.Token) (interface{}, error) {
+		return []byte(appconfig.JWTSecret), nil
+	})
+	if e != nil {
+		return "", false
+	}
+	cliamAfter := tokenAfter.Claims.(*UserJWTModel)
+	return cliamAfter.Username, true
+}

route/login.go

@@ -0,0 +1,22 @@
+package route
+
+import (
+	"time"
+
+	"github.com/dingdinglz/dingbot/database"
+	"github.com/gofiber/fiber/v2"
+)
+
+func ApiLoginRoute(c *fiber.Ctx) error {
+	if c.FormValue("username", "") == "" || c.FormValue("password", "") == "" {
+		return JsonMessage(c, 1, "用户名或密码不能为空!")
+	}
+	ok := database.UserLogin(c.FormValue("username"), c.FormValue("password"))
+	if !ok {
+		return JsonMessage(c, 2, "用户名或密码错误!")
+	}
+	c.Cookie(&fiber.Cookie{Name: "token",
+		Value:   jwtUserGenerate(c.FormValue("username")),
+		Expires: time.Now().Add(24 * time.Hour)})
+	return JsonMessage(c, 0, "ok")
+}

route/middleware.go

@@ -0,0 +1,19 @@
+package route
+
+import "github.com/gofiber/fiber/v2"
+
+func LoginMiddleware(c *fiber.Ctx) error {
+	if c.Path() == "/login" || c.Path() == "/api/login" {
+		return c.Next()
+	}
+	t := c.Cookies("token", "")
+	if t == "" {
+		return c.Redirect("/login")
+	}
+	user, ok := jwtUserParse(t)
+	if !ok {
+		return c.Redirect("/login")
+	}
+	c.Locals("user", user)
+	return c.Next()
+}

server.go

@@ -50,6 +50,8 @@ func ServerInitRun() {
 }
 
 func ServerCommonRun() {
+	appconfig.MainServer.Use(route.LoginMiddleware)
+	appconfig.MainServer.Get("/login", route.LoginRoute)
 	appconfig.MainServer.Get("/", route.IndexRoute)
 	appconfig.MainServer.Get("/key", route.KeyWordRoute)
 	appconfig.MainServer.Get("/plugin-edit/:name", route.PluginEditRoute)
@@ -60,6 +62,7 @@ func ServerCommonRun() {
 	appconfig.MainServer.Post("/github/webhook", route.GithubWebhookRoute)
 
 	apiRoute := appconfig.MainServer.Group("/api")
+	apiRoute.Post("/login", route.ApiLoginRoute)
 
 	apiGetRoute := apiRoute.Group("/get")
 	apiGetRoute.Get("/bot", route.GetBotConfigRoute)