Initial commit

app/mzl/modules/jwt/middleware/JwtMiddleware.php

@@ -0,0 +1,74 @@
+<?php
+
+namespace app\mzl\modules\jwt\middleware;
+
+use ReflectionClass;
+use Webman\Http\Request;
+use Webman\Http\Response;
+use Webman\MiddlewareInterface;
+use app\mzl\modules\jwt\service\JwtService;
+
+class JwtMiddleware implements MiddlewareInterface
+{
+
+    protected $jwtService;
+
+    public function __construct()
+    {
+        $this->jwtService = new JwtService();
+    }
+
+    public function process(Request $request, callable $handler): Response
+    {
+        // 通过反射获取控制器
+        $controller = new ReflectionClass($request->controller);
+        $noNeedJwt = $controller->getDefaultProperties()['noNeedJwt'] ?? [];
+        
+        // 除外
+        if (in_array($request->action, $noNeedJwt)) {
+
+            return $handler($request);
+        } else {
+            try {
+                $authHeader = $request->header('Authorization');
+                
+                if (!$authHeader || !preg_match('/Bearer\s(\S+)/', $authHeader, $matches)) {
+                    $body = [
+                        'status'  => 'error',
+                        'code'    => 401,
+                        'message' => '未授权',
+                        'data'    => [],
+                    ];
+                    return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
+                }
+        
+                $token = $matches[1];
+
+                $request->user = $this->jwtService->verifyToken($token);
+                
+                // 验证权限 -- start
+                // $user = \app\mzl\modules\permission\model\User::find($request->user->user_id);
+                // if (!$user || !$user->hasPermission($request->path())) {
+                //     $body = [
+                //         'status'  => 'error',
+                //         'code'    => 403,
+                //         'message' => '无权限访问',
+                //         'data'    => [],
+                //     ];
+                //     return response(json_encode($body, JSON_UNESCAPED_UNICODE), 403, ['Content-Type' => 'application/json']);
+                // }
+                // 验证权限 -- end
+            } catch (\Throwable $e) {
+                $body = [
+                    'status'  => 'error',
+                    'code'    => 401,
+                    'message' => $e->getMessage(),
+                    'data'    => [],
+                ];
+                return response(json_encode($body, JSON_UNESCAPED_UNICODE), 401, ['Content-Type' => 'application/json']);
+            }
+    
+            return $handler($request);
+        }
+    }
+}