实现角色接口增删改查
This commit is contained in:
@ -41,7 +41,7 @@ func Auth(r *ghttp.Request) {
|
||||
Exit(r, err)
|
||||
}
|
||||
r.SetCtxVar("userId", tokenOut.UserId)
|
||||
r.SetCtxVar("permission", tokenOut.Permission)
|
||||
r.SetCtxVar("role", tokenOut.Role)
|
||||
r.SetCtxVar("jti", tokenOut.JTI)
|
||||
}
|
||||
r.Middleware.Next()
|
||||
|
||||
@ -19,8 +19,8 @@ import (
|
||||
// - 如果权限验证未通过:终止请求,返回权限不足的错误(ecode.Denied)。
|
||||
// - 如果权限验证通过:继续执行后续中间件或处理逻辑。
|
||||
func Casbin(r *ghttp.Request) {
|
||||
permission := r.GetCtxVar("permission").String()
|
||||
if !myCasbin.GetMyCasbin().HasPermission(permission, r.URL.Path, r.Method) {
|
||||
role := r.GetCtxVar("role").String()
|
||||
if !myCasbin.GetMyCasbin().HasPermission(role, r.URL.Path, r.Method) {
|
||||
Exit(r, ecode.Denied)
|
||||
}
|
||||
r.Middleware.Next()
|
||||
|
||||
Reference in New Issue
Block a user