saw-go/main.go

package main

import (
	"StuAcaWorksAI/dao"
	"StuAcaWorksAI/handler"
	"StuAcaWorksAI/proto"
	"StuAcaWorksAI/service"
	"StuAcaWorksAI/worker"
	"encoding/json"
	"fmt"
	"github.com/gin-gonic/gin"
	"github.com/golang-jwt/jwt"
	"github.com/robfig/cron/v3"
	"io"
	"log"
	"net/http"
	"os"
	"strconv"
	"strings"
)

func main() {
	gin.SetMode(gin.ReleaseMode)
	r := gin.Default()
	err := dao.Init()
	if err != nil {
		panic("failed to connect database:" + err.Error())
	}
	err = worker.InitRedis()
	if err != nil {
		panic("failed to connect redis:" + err.Error())
	}
	r.Use(handler.CrosHandler())
	r.Use(JWTAuthMiddleware())   // 使用 JWT 认证中间件
	handler.SetUpUserGroup(r)    // User
	handler.SetUpToolGroup(r)    // Tool
	handler.SetUpFileGroup(r)    // File
	handler.SetUpSessionGroup(r) // Session
	handler.SetUpModelGroup(r)   // Model
	defer dao.Close()
	defer worker.CloseRedis()
	//定时任务
	c := cron.New(cron.WithSeconds())
	// 添加每 10 秒执行一次的任务
	_, err = c.AddFunc("@every 10s", myTask)
	if err != nil {
		log.Fatal("添加定时任务失败: ", err)
	}
	c.Start()
	//读取配置文件，设置系统
	ReadConfigToSetSystem()
	r.Run(":" + proto.Config.SERVER_PORT) // listen and serve on 0.0.0.0:8083
}
func init() {
	// 创建cid的目录
	os.MkdirAll(proto.CID_BASE_DIR, os.ModePerm)
	os.MkdirAll(proto.CID_BASE_DIR+"script", os.ModePerm)
	os.MkdirAll(proto.CID_BASE_DIR+"workspace", os.ModePerm)
	//读取配置文件
	//文件地址/home/saw-ai/saw-ai.conf
	configPath := "/home/saw/saw-ai-go/saw-ai.conf"
	//读取配置文件
	err := proto.ReadConfig(configPath)
	if err != nil {
		panic("failed to read config file:" + err.Error())
	}
}

func writeLogger(c *gin.Context) {
	ip := c.ClientIP()
	method := c.Request.Method
	path := c.Request.URL.Path
	params := ""

	if method == "GET" {
		params = c.Request.URL.RawQuery
	}
	if method == "POST" && !strings.Contains(c.Request.URL.Path, "/upload") {
		params = c.Request.PostForm.Encode()
		if params == "" {
			// 请求体
			bodyBytes, _ := io.ReadAll(c.Request.Body)
			c.Request.Body = io.NopCloser(strings.NewReader(string(bodyBytes))) // Write body back, so other handler can read it too
			params = string(bodyBytes)
		}
	}
	if strings.Contains(c.Request.URL.Path, "/upload") {
		params = "upload file"
	}
	go dao.InsertLogToDB(path, ip, method, params)
}

func JWTAuthMiddleware() gin.HandlerFunc {
	return func(c *gin.Context) {
		if proto.Config.LOG_SAVE_DAYS > 0 {
			writeLogger(c)
		}
		// 从请求头中获取 JWT 令牌
		tokenString := c.Request.Header.Get("token")

		//请求方式为get时，从url中获取token
		if tokenString == "" {
			tokenString = c.Query("token")
		}
		//如果请求为login或register，则不需要验证token
		for k, _ := range proto.Url_map {
			if strings.Contains(c.Request.URL.Path, k) {
				c.Next()
				return
			}
		}
		if tokenString == "" {
			//c.AbortWithStatus(200)
			c.JSON(200, gin.H{
				"message": "Unauthorized",
				"error":   "token is empty",
				"code":    proto.TokenIsNull,
			})
			return
		}
		if proto.Config.TOKEN_USE_REDIS {
			redisToken := worker.GetRedis(tokenString)
			if redisToken == "" {
				c.AbortWithStatus(200)
				c.JSON(200, gin.H{
					"message": "NOT_LOGIN",
					"error":   "server token is empty",
					"code":    proto.TokenIsNull,
				})
				return
			}
		}

		//查看token是否在超级token中
		if worker.IsContainSet("super_permission_tokens", tokenString) {
			sId := c.Request.Header.Get("super_id")
			if sId == "" {
				sId = c.Query("super_id")
			}
			if sId == "" {
				c.AbortWithStatus(200)
				c.JSON(200, gin.H{
					"message": "NOT_LOGIN",
					"error":   "super_id is empty",
					"code":    proto.TokenIsNull,
				})
				return
			}
			id, _ := strconv.Atoi(sId)
			idFloat64 := float64(id)
			//查看s_id类型
			c.Set("id", idFloat64)
			c.Next()
			return
		}

		// 使用加密secret 解析 JWT 令牌
		token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
			return proto.SigningKey, nil
		})

		// 验证令牌
		if err != nil || !token.Valid {
			c.AbortWithStatus(200)
			c.JSON(200, gin.H{
				"message": "NOT_LOGIN",
				"error":   "Invalid token",
				"code":    proto.TokenExpired,
			})
			return
		}

		// 将用户信息添加到上下文中
		c.Set("id", token.Claims.(jwt.MapClaims)["id"])
		c.Set("username", token.Claims.(jwt.MapClaims)["username"])

		if UserFuncIntercept(int(token.Claims.(jwt.MapClaims)["id"].(float64)), c.Request.URL.Path) {
			c.AbortWithStatus(200)
			c.JSON(http.StatusOK, gin.H{
				"message": "no function permission",
				"error":   "no permission",
				"code":    proto.NoPermission,
			})
			return
		}

		// 继续处理请求
		c.Next()
	}
}

func myTask() {
	// 定时任务
	//redis中取出数据
	//handler.RunCron()
	if proto.Config.MONITOR {
		handler.ScanDeviceStatus()
	}
	//其它定时任务-通用
	RunGeneralCron()
}

func ReadConfigToSetSystem() {
	//将当前配置文件的信息写入redis,用于程序运行时排查
	config_json, c_err := json.Marshal(proto.Config)
	if c_err != nil {
		fmt.Println("ReadConfigToSetSystem Error encoding config,err :", c_err)
	} else {
		worker.SetRedis("system_config_info", string(config_json))
	}

	//redis添加通用定时任务
	key := "cron_info"
	//日志清理
	res := worker.GetRedis(key)
	var cron_infos []proto.CronInfo
	if res != "" {
		err := json.Unmarshal([]byte(res), &cron_infos)
		if err != nil {
			fmt.Println("ReadConfigToSetSystem Error decoding config,key value is :", res)
		}

		//查看清除日志任务是否存在
		if proto.Config.LOG_SAVE_DAYS > 0 {
			var is_exist bool
			for _, v := range cron_infos {
				if v.Type == 1 {
					is_exist = true
					break
				}
			}
			if !is_exist {
				var logClean proto.CronInfo
				logClean.Type = 1
				logClean.Info = "日志清理"
				logClean.Curr = 86400
				logClean.Every = 86400
				cron_infos = append(cron_infos, logClean)
			}
		}

		is_exist := false
		user_sync_id := -1 //用户同步任务索引
		for i, v := range cron_infos {
			if v.Type == 2 {
				is_exist = true
				if proto.Config.USER_SYNC_TIME != v.Every {
					v.Every = proto.Config.USER_SYNC_TIME
					v.Curr = proto.Config.USER_SYNC_TIME
				}
				user_sync_id = i
				cron_infos[i] = v
				break
			}
		}
		if proto.Config.SERVER_USER_TYPE == "slave" {
			if proto.Config.USER_SYNC_TIME > 0 && !is_exist {
				var userSync proto.CronInfo
				userSync.Type = 2
				userSync.Info = "user"
				userSync.Curr = proto.Config.USER_SYNC_TIME
				userSync.Every = proto.Config.USER_SYNC_TIME
				cron_infos = append(cron_infos, userSync)
			} else if user_sync_id != -1 {
				cron_infos = append(cron_infos[:user_sync_id], cron_infos[user_sync_id+1:]...) //删除
			}
		}

	} else {
		if proto.Config.LOG_SAVE_DAYS > 0 {
			var logClean proto.CronInfo
			logClean.Type = 1
			logClean.Info = "日志清理"
			logClean.Curr = 86400
			logClean.Every = 86400
			cron_infos = append(cron_infos, logClean)
		}
		if proto.Config.SERVER_USER_TYPE == "slave" && proto.Config.USER_SYNC_TIME > 0 {
			var userSync proto.CronInfo
			userSync.Type = 2
			userSync.Info = "user"
			userSync.Curr = proto.Config.USER_SYNC_TIME
			userSync.Every = proto.Config.USER_SYNC_TIME
			cron_infos = append(cron_infos, userSync)
		}
	}
	//存入redis
	json_data, err := json.Marshal(cron_infos)
	if err != nil {
		fmt.Println("ReadConfigToSetSystem Error encoding config,value is :", cron_infos)
	} else {
		worker.SetRedis(key, string(json_data))
	}
}

func RunGeneralCron() {
	//redis添加通用定时任务
	key := "cron_info"
	//日志清理
	res := worker.GetRedis(key)
	var cron_infos []proto.CronInfo
	if res != "" {
		err := json.Unmarshal([]byte(res), &cron_infos)
		if err != nil {
			fmt.Println("RunGeneralCron Error decoding config,key value is :", res)
		}
		for i, v := range cron_infos {
			//1:日志清理，其他待定
			if v.Type == 1 {
				//日志清理
				if v.Curr <= 0 {
					//执行日志清理
					go dao.DeleteLog(proto.Config.LOG_SAVE_DAYS)
					v.Curr = v.Every
				} else {
					v.Curr -= 10
				}
				cron_infos[i] = v
				continue
			}
			//2 从服务器同步数据
			if v.Type == 2 {
				if v.Curr <= 0 {
					//执行从服务器同步数据
					if proto.Config.SERVER_USER_TYPE == "slave" && v.Info == "user" {
						go service.UserSyncDataFromMaster()
					}
					v.Curr = v.Every
				} else {
					v.Curr -= 10
				}
				cron_infos[i] = v
				continue
			}
		}
		//存入redis
		json_data, err := json.Marshal(cron_infos)
		if err != nil {
			fmt.Println("RunGeneralCron Error encoding config,value is :", cron_infos)
		} else {
			worker.SetRedis(key, string(json_data))
		}
	}
}

// 用户功能拦截,返回true表示拦截，false表示不拦截
func UserFuncIntercept(id int, url string) bool {
	//先查看是否有权限
	user := dao.FindUserByUserID(id)
	//如果用户有权限，则不拦截
	for k, v := range proto.Per_menu_map {
		if strings.Contains(url, k) {
			if v == 1 && user.VideoFunc == false {
				return true
			}
			if v == 2 && user.DeviceFunc == false {
				return true
			}
			if v == 3 && user.CIDFunc == false {
				return true
			}
		}
	}
	return false
}