grpc之golang使用拦截器验证身份

前面的虽然实现了接口请求验证，但是需要在每个方法都加一个验证，有点不太友好，所以调整一下使用服务端拦截器。

1. 修改register.go文件 调整前

func Register() *grpc.Server {
	s := grpc.NewServer(grpc.Creds(insecure.NewCredentials()))
	greeter.RegisterGreeterServer(s, &Greeter{})
	carrier.RegisterCarrierServer(s, &Carrier{})
	token.RegisterTokenServer(s, &Token{})
	file.RegisterFileServer(s, &File{})
	return s
}

调整后

func Register() *grpc.Server {
	//s := grpc.NewServer(grpc.Creds(insecure.NewCredentials()))
	s := grpc.NewServer(grpc.UnaryInterceptor(unaryInterceptor))
	greeter.RegisterGreeterServer(s, &Greeter{})
	carrier.RegisterCarrierServer(s, &Carrier{})
	token.RegisterTokenServer(s, &Token{})
	file.RegisterFileServer(s, &File{})
	return s
}

增加拦截器方法

// 一般拦截器
func unaryInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) {
	// authentication (token verification)
	md, ok := metadata.FromIncomingContext(ctx)
	if !ok {
		return nil, status.Errorf(codes.Unauthenticated, "获取token失败")
	}
	var str string
	if value, ok := md["accesstoken"]; ok {
		str = value[0]
	}
	tokenStr := tool.TokenDeCode(str)
	if !ok {
		return nil, errMissingMetadata
	}
	var user token.UserRequest
	json.Unmarshal([]byte(tokenStr), &user)

	if user.UserName != "wms" || user.PassWord != "123456" {
		return nil, status.Errorf(codes.Unauthenticated, "Token无效")
	}
	m, err := handler(ctx, req)
	if err != nil {
		return nil, err
	}
	return m, err
}

// 流式拦截器
type wrappedStream struct {
	grpc.ServerStream
}

func (w *wrappedStream) RecvMsg(m any) error {
	return w.ServerStream.RecvMsg(m)
}

func (w *wrappedStream) SendMsg(m any) error {
	return w.ServerStream.SendMsg(m)
}

func newWrappedStream(s grpc.ServerStream) grpc.ServerStream {
	return &wrappedStream{s}
}
func streamInterceptor(srv any, ss grpc.ServerStream, info *grpc.StreamServerInfo, handler grpc.StreamHandler) error {
	// authentication (token verification)
	md, ok := metadata.FromIncomingContext(ss.Context())
	if !ok {
		return errMissingMetadata
	}
	if !ok {
		return status.Errorf(codes.Unauthenticated, "获取token失败")
	}
	var str string
	if value, ok := md["accesstoken"]; ok {
		str = value[0]
	}
	tokenStr := tool.TokenDeCode(str)
	if !ok {
		return errMissingMetadata
	}
	var user token.UserRequest
	json.Unmarshal([]byte(tokenStr), &user)

	if user.UserName != "wms" || user.PassWord != "123456" {
		return status.Errorf(codes.Unauthenticated, "Token无效")
	}
	err := handler(srv, newWrappedStream(ss))
	return err
}