9c39c8cbd7
Go workspace (go.work) with 5 microservices + shared library: - gateway (8080), auth-service (8081), purchaser-service (8082) - textile-service (8083), washing-service (8084) - shared: proto definitions, common packages Infrastructure: docker-compose for local dev, K8s manifests for K3s cluster deployment (mysql/redis/etcd + traefik ingress). Frontend (iloom-flatten) added as git submodule. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
32 lines
618 B
Go
32 lines
618 B
Go
package middleware
|
|
|
|
import (
|
|
"github.com/gin-gonic/gin"
|
|
"github.com/muyuqingfeng/iloom/shared/pkg/response"
|
|
)
|
|
|
|
func RoleRequired(roles ...string) gin.HandlerFunc {
|
|
allowed := make(map[string]bool, len(roles))
|
|
for _, r := range roles {
|
|
allowed[r] = true
|
|
}
|
|
|
|
return func(c *gin.Context) {
|
|
role, exists := c.Get("role")
|
|
if !exists {
|
|
response.Forbidden(c, "role not found in context")
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
roleStr, ok := role.(string)
|
|
if !ok || !allowed[roleStr] {
|
|
response.Error(c, 403, response.ErrCodeRoleMismatch, "insufficient role permission")
|
|
c.Abort()
|
|
return
|
|
}
|
|
|
|
c.Next()
|
|
}
|
|
}
|