70 lines
2.0 KiB
PHP
70 lines
2.0 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
/**
|
|
*+------------------
|
|
* madong
|
|
*+------------------
|
|
* Copyright (c) https://gitee.com/motion-code All rights reserved.
|
|
*+------------------
|
|
* Author: Mr. April (405784684@qq.com)
|
|
*+------------------
|
|
* Official Website: http://www.madong.tech
|
|
*/
|
|
|
|
namespace app\adminapi\middleware;
|
|
|
|
|
|
use app\adminapi\middleware\helper\SseHelper;
|
|
use core\exception\handler\UnauthorizedHttpException;
|
|
use core\jwt\JwtToken;
|
|
use core\tool\Json;
|
|
use madong\swagger\attribute\AllowAnonymous;
|
|
use madong\swagger\helper\AnnotationHelper;
|
|
use Webman\Http\Request;
|
|
use Webman\Http\Response;
|
|
use Webman\MiddlewareInterface;
|
|
|
|
/**
|
|
* AccessToken 中间件（JWT Token 验证）
|
|
* 功能：
|
|
* 1. 检查请求是否需要跳过 Token 验证（通过 AllowAnonymous 注解）
|
|
* 2. 验证 JWT Token 有效性，无效则返回 401
|
|
*/
|
|
#\[\Attribute\]
|
|
final class AccessTokenMiddleware implements MiddlewareInterface
|
|
{
|
|
public function process(Request $request, callable $handler): Response
|
|
{
|
|
$route = $request->route;
|
|
if (!$route || !isset($request->action)) {
|
|
return $handler($request);
|
|
}
|
|
|
|
$controllerClass = $request->controller;
|
|
$action = $request->action;
|
|
|
|
$skipAuth = AnnotationHelper::getMethodAnnotation($controllerClass, $action, AllowAnonymous::class);
|
|
if ($skipAuth && !$skipAuth->requireToken) {
|
|
return $handler($request);
|
|
}
|
|
|
|
try {
|
|
$jwt = new JwtToken();
|
|
$payload = $jwt->verify();
|
|
$userId = $payload['id'] ?? null;
|
|
if (empty($userId)) {
|
|
throw new UnauthorizedHttpException();
|
|
}
|
|
$jwt->touchCurrentToken();
|
|
} catch (\Exception $e) {
|
|
// 检查是否为SSE请求
|
|
if (SseHelper::isSseRequest($request)) {
|
|
return SseHelper::sendSseErrorViaConnection($request, $e->getMessage());
|
|
}
|
|
return Json::fail($e->getMessage(), [], 401);
|
|
}
|
|
return $handler($request);
|
|
}
|
|
|
|
}
|