后端: 1. 阶段 2 user/auth 服务边界落地,新增 `cmd/userauth` go-zero zrpc 服务、`services/userauth` 核心实现、gateway user API/zrpc client 与 shared contracts/ports,迁移注册、登录、刷新 token、登出、JWT、黑名单和 token 额度治理 2. gateway 与启动装配切流,`cmd/all` 只保留边缘路由、鉴权和轻量组合,通过 userauth zrpc 访问核心用户能力;拆分 MySQL/Redis 初始化与 AutoMigrate 边界,`userauth` 自迁 `users` 和 token 记账幂等表,`all` 不再迁用户表 3. 清退 Gin 单体旧 user/auth DAO、model、service、router、middleware 和 JWT handler,并同步调整 agent/schedule/cache/outbox 相关调用依赖 4. 补齐 refresh token 防并发重放、MySQL 幂等 token 记账、额度 `>=` 拦截和 RPC 错误映射,避免重复记账与内部错误透出 文档: 1. 新增《学习计划论坛与Token商店PRD》
219 lines
5.8 KiB
Go
219 lines
5.8 KiB
Go
package userauth
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/LoveLosita/smartflow/backend/services/userauth/rpc/pb"
|
|
contracts "github.com/LoveLosita/smartflow/backend/shared/contracts/userauth"
|
|
"github.com/zeromicro/go-zero/zrpc"
|
|
)
|
|
|
|
const (
|
|
defaultEndpoint = "127.0.0.1:9081"
|
|
defaultTimeout = 2 * time.Second
|
|
)
|
|
|
|
type ClientConfig struct {
|
|
Endpoints []string
|
|
Target string
|
|
Timeout time.Duration
|
|
}
|
|
|
|
// Client 是 gateway 侧 user/auth zrpc 的最小适配层。
|
|
//
|
|
// 职责边界:
|
|
// 1. 只负责跨进程 gRPC 调用和响应转译,不碰 DB / Redis / JWT 细节;
|
|
// 2. 服务端业务错误先通过 gRPC status 传输,再在这里反解回 respond.Response 风格;
|
|
// 3. 上层调用方仍然可以保持 `res, err :=` 的统一用法。
|
|
type Client struct {
|
|
rpc pb.UserAuthClient
|
|
}
|
|
|
|
func NewClient(cfg ClientConfig) (*Client, error) {
|
|
timeout := cfg.Timeout
|
|
if timeout <= 0 {
|
|
timeout = defaultTimeout
|
|
}
|
|
endpoints := normalizeEndpoints(cfg.Endpoints)
|
|
target := strings.TrimSpace(cfg.Target)
|
|
if len(endpoints) == 0 && target == "" {
|
|
endpoints = []string{defaultEndpoint}
|
|
}
|
|
|
|
zclient, err := zrpc.NewClient(zrpc.RpcClientConf{
|
|
Endpoints: endpoints,
|
|
Target: target,
|
|
NonBlock: true,
|
|
Timeout: int64(timeout / time.Millisecond),
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &Client{rpc: pb.NewUserAuthClient(zclient.Conn())}, nil
|
|
}
|
|
|
|
func (c *Client) Register(ctx context.Context, req contracts.RegisterRequest) (*contracts.RegisterResponse, error) {
|
|
if err := c.ensureReady(); err != nil {
|
|
return nil, err
|
|
}
|
|
resp, err := c.rpc.Register(ctx, &pb.RegisterRequest{
|
|
Username: req.Username,
|
|
Password: req.Password,
|
|
PhoneNumber: req.PhoneNumber,
|
|
})
|
|
if err != nil {
|
|
return nil, responseFromRPCError(err)
|
|
}
|
|
if resp == nil {
|
|
return nil, errors.New("userauth zrpc service returned empty register response")
|
|
}
|
|
return &contracts.RegisterResponse{ID: uint(resp.Id)}, nil
|
|
}
|
|
|
|
func (c *Client) Login(ctx context.Context, req contracts.LoginRequest) (*contracts.Tokens, error) {
|
|
if err := c.ensureReady(); err != nil {
|
|
return nil, err
|
|
}
|
|
resp, err := c.rpc.Login(ctx, &pb.LoginRequest{
|
|
Username: req.Username,
|
|
Password: req.Password,
|
|
})
|
|
if err != nil {
|
|
return nil, responseFromRPCError(err)
|
|
}
|
|
return tokensFromResponse(resp)
|
|
}
|
|
|
|
func (c *Client) RefreshToken(ctx context.Context, req contracts.RefreshTokenRequest) (*contracts.Tokens, error) {
|
|
if err := c.ensureReady(); err != nil {
|
|
return nil, err
|
|
}
|
|
resp, err := c.rpc.RefreshToken(ctx, &pb.RefreshTokenRequest{
|
|
RefreshToken: req.RefreshToken,
|
|
})
|
|
if err != nil {
|
|
return nil, responseFromRPCError(err)
|
|
}
|
|
return tokensFromResponse(resp)
|
|
}
|
|
|
|
func (c *Client) Logout(ctx context.Context, accessToken string) error {
|
|
if err := c.ensureReady(); err != nil {
|
|
return err
|
|
}
|
|
resp, err := c.rpc.Logout(ctx, &pb.LogoutRequest{
|
|
AccessToken: accessToken,
|
|
})
|
|
if err != nil {
|
|
return responseFromRPCError(err)
|
|
}
|
|
if resp == nil {
|
|
return errors.New("userauth zrpc service returned empty logout response")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (c *Client) ValidateAccessToken(ctx context.Context, accessToken string) (*contracts.ValidateAccessTokenResponse, error) {
|
|
if err := c.ensureReady(); err != nil {
|
|
return nil, err
|
|
}
|
|
resp, err := c.rpc.ValidateAccessToken(ctx, &pb.ValidateAccessTokenRequest{
|
|
AccessToken: accessToken,
|
|
})
|
|
if err != nil {
|
|
return nil, responseFromRPCError(err)
|
|
}
|
|
if resp == nil {
|
|
return nil, errors.New("userauth zrpc service returned empty validate response")
|
|
}
|
|
return &contracts.ValidateAccessTokenResponse{
|
|
Valid: resp.Valid,
|
|
UserID: int(resp.UserId),
|
|
TokenType: resp.TokenType,
|
|
JTI: resp.Jti,
|
|
ExpiresAt: timeFromUnixNano(resp.ExpiresAtUnixNano),
|
|
}, nil
|
|
}
|
|
|
|
func (c *Client) CheckTokenQuota(ctx context.Context, userID int) (*contracts.CheckTokenQuotaResponse, error) {
|
|
if err := c.ensureReady(); err != nil {
|
|
return nil, err
|
|
}
|
|
resp, err := c.rpc.CheckTokenQuota(ctx, &pb.CheckTokenQuotaRequest{
|
|
UserId: int64(userID),
|
|
})
|
|
if err != nil {
|
|
return nil, responseFromRPCError(err)
|
|
}
|
|
if resp == nil {
|
|
return nil, errors.New("userauth zrpc service returned empty quota response")
|
|
}
|
|
return &contracts.CheckTokenQuotaResponse{
|
|
Allowed: resp.Allowed,
|
|
TokenLimit: int(resp.TokenLimit),
|
|
TokenUsage: int(resp.TokenUsage),
|
|
LastResetAt: timeFromUnixNano(resp.LastResetAtUnixNano),
|
|
}, nil
|
|
}
|
|
|
|
func (c *Client) AdjustTokenUsage(ctx context.Context, req contracts.AdjustTokenUsageRequest) (*contracts.CheckTokenQuotaResponse, error) {
|
|
if err := c.ensureReady(); err != nil {
|
|
return nil, err
|
|
}
|
|
resp, err := c.rpc.AdjustTokenUsage(ctx, &pb.AdjustTokenUsageRequest{
|
|
EventId: req.EventID,
|
|
UserId: int64(req.UserID),
|
|
TokenDelta: int64(req.TokenDelta),
|
|
})
|
|
if err != nil {
|
|
return nil, responseFromRPCError(err)
|
|
}
|
|
if resp == nil {
|
|
return nil, errors.New("userauth zrpc service returned empty adjust response")
|
|
}
|
|
return &contracts.CheckTokenQuotaResponse{
|
|
Allowed: resp.Allowed,
|
|
TokenLimit: int(resp.TokenLimit),
|
|
TokenUsage: int(resp.TokenUsage),
|
|
LastResetAt: timeFromUnixNano(resp.LastResetAtUnixNano),
|
|
}, nil
|
|
}
|
|
|
|
func (c *Client) ensureReady() error {
|
|
if c == nil || c.rpc == nil {
|
|
return errors.New("userauth zrpc client is not initialized")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func tokensFromResponse(resp *pb.TokensResponse) (*contracts.Tokens, error) {
|
|
if resp == nil {
|
|
return nil, errors.New("userauth zrpc service returned empty token response")
|
|
}
|
|
return &contracts.Tokens{
|
|
AccessToken: resp.AccessToken,
|
|
RefreshToken: resp.RefreshToken,
|
|
}, nil
|
|
}
|
|
|
|
func normalizeEndpoints(values []string) []string {
|
|
endpoints := make([]string, 0, len(values))
|
|
for _, value := range values {
|
|
trimmed := strings.TrimSpace(value)
|
|
if trimmed != "" {
|
|
endpoints = append(endpoints, trimmed)
|
|
}
|
|
}
|
|
return endpoints
|
|
}
|
|
|
|
func timeFromUnixNano(value int64) time.Time {
|
|
if value <= 0 {
|
|
return time.Time{}
|
|
}
|
|
return time.Unix(0, value)
|
|
}
|