mirror of
https://github.com/mindoc-org/mindoc.git
synced 2026-02-27 17:03:57 +08:00
64 lines
2.1 KiB
Go
64 lines
2.1 KiB
Go
package routers
|
||
|
||
import (
|
||
"encoding/json"
|
||
"net/url"
|
||
"regexp"
|
||
|
||
"github.com/beego/beego/v2/server/web"
|
||
"github.com/beego/beego/v2/server/web/context"
|
||
|
||
"github.com/mindoc-org/mindoc/conf"
|
||
"github.com/mindoc-org/mindoc/mcp"
|
||
"github.com/mindoc-org/mindoc/models"
|
||
)
|
||
|
||
func init() {
|
||
var FilterUser = func(ctx *context.Context) {
|
||
_, ok := ctx.Input.Session(conf.LoginSessionName).(models.Member)
|
||
|
||
if !ok {
|
||
if ctx.Input.IsAjax() {
|
||
jsonData := make(map[string]interface{}, 3)
|
||
|
||
jsonData["errcode"] = 403
|
||
jsonData["message"] = "请登录后再操作"
|
||
|
||
returnJSON, _ := json.Marshal(jsonData)
|
||
|
||
ctx.ResponseWriter.Write(returnJSON)
|
||
} else {
|
||
ctx.Redirect(302, conf.URLFor("AccountController.Login")+"?url="+url.PathEscape(conf.BaseUrl+ctx.Request.URL.RequestURI()))
|
||
}
|
||
}
|
||
}
|
||
web.InsertFilter("/manager", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/manager/*", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/setting", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/setting/*", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/book", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/book/*", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/api/*", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/manage/*", web.BeforeRouter, FilterUser)
|
||
web.InsertFilter("/mcp/*", web.BeforeRouter, mcp.AuthMiddleware)
|
||
|
||
var FinishRouter = func(ctx *context.Context) {
|
||
ctx.ResponseWriter.Header().Add("MinDoc-Version", conf.VERSION)
|
||
ctx.ResponseWriter.Header().Add("MinDoc-Site", "https://www.iminho.me")
|
||
ctx.ResponseWriter.Header().Add("X-XSS-Protection", "1; mode=block")
|
||
}
|
||
|
||
var StartRouter = func(ctx *context.Context) {
|
||
sessname, _ := web.AppConfig.String("sessionname")
|
||
sessionId := ctx.Input.Cookie(sessname)
|
||
if sessionId != "" {
|
||
//sessionId必须是数字字母组成，且最小32个字符，最大1024字符
|
||
if ok, err := regexp.MatchString(`^[a-zA-Z0-9]{32,512}$`, sessionId); !ok || err != nil {
|
||
panic("401")
|
||
}
|
||
}
|
||
}
|
||
web.InsertFilter("/*", web.BeforeStatic, StartRouter, web.WithReturnOnOutput(false))
|
||
web.InsertFilter("/*", web.BeforeRouter, FinishRouter, web.WithReturnOnOutput(false))
|
||
}
|