Function AuthFilter

api/route.go:220–259

()

}

func AuthFilter() echo.MiddlewareFunc {
	return func(next echo.HandlerFunc) echo.HandlerFunc {
		return func(c echo.Context) error {
			if inWhiteList(c.Request().URL.Path) {
				return next(c)
			}
			logger := handler.NewLogger().Named("AuthFilter")
			storeManager, err := common.NewStoreManager([]string{handler.ConsulAddr}, logger)
			if err != nil {
				return echo.NewHTTPError(http.StatusForbidden)
			}
			user, exists, err := storeManager.GetUser(v2.GetUserName(c))
			if err != nil || !exists {
				return echo.NewHTTPError(http.StatusForbidden)
			}

			// admin  has the maximum authority
			if user.Role == common.DefaultRole {
				return next(c)
			}
			role, exists, err := storeManager.GetRole(user.Tenant, user.Role)
			if err != nil || !exists {
				return echo.NewHTTPError(http.StatusForbidden)
			}
			authority := make([]models.MenuItem, 0)
			err = json.Unmarshal([]byte(role.Authority), &authority)
			if err != nil {
				return echo.NewHTTPError(http.StatusForbidden, fmt.Sprintf("check your authority fail : %v", err))
			}
			for _, menuItem := range authority {
				for _, buttonItem := range menuItem.Operations {
					if c.Request().URL.Path == buttonItem.Uri {
						return next(c)
					}
				}
			}
			return echo.NewHTTPError(http.StatusForbidden)
		}
	}
}

var whiteList = []string{
	"/v2/nodes",