125 lines
3.2 KiB
Go
125 lines
3.2 KiB
Go
package midware
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"net/http"
|
|
"strconv"
|
|
"strings"
|
|
"time"
|
|
|
|
"ems.agt/lib/dborm"
|
|
"ems.agt/lib/services"
|
|
)
|
|
|
|
// 登录策略限制登录时间和访问ip范围
|
|
func ArrowIPAddr(next http.Handler) http.Handler {
|
|
return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
fmt.Println(" From Host:", r.RemoteAddr)
|
|
ipAddr := strings.Split(r.RemoteAddr, ":")[0]
|
|
|
|
// 读取配置信息 登录策略设置
|
|
result, err := dborm.XormGetConfig("Security", "loginSecurity")
|
|
if err != nil {
|
|
next.ServeHTTP(w, r)
|
|
return
|
|
}
|
|
data := make(map[string]any)
|
|
err = json.Unmarshal([]byte(result["value_json"].(string)), &data)
|
|
if err != nil {
|
|
next.ServeHTTP(w, r)
|
|
return
|
|
}
|
|
startIP := data["start_IP"].(string)
|
|
endIP := data["end_IP"].(string)
|
|
logintimeRange := data["logintime_range"].(string)
|
|
|
|
// 检查ip
|
|
okPer3 := parsePer3(ipAddr, startIP, endIP)
|
|
if !okPer3 {
|
|
services.ResponseErrorWithJson(w, 502, "网关登录策略-IP限制")
|
|
return
|
|
}
|
|
okLast4 := parseLast4(ipAddr, startIP, endIP)
|
|
if !okLast4 {
|
|
services.ResponseErrorWithJson(w, 502, "网关登录策略-IP限制")
|
|
return
|
|
}
|
|
|
|
// 检查开放时间
|
|
logintimeRangeArr := strings.Split(logintimeRange, " - ")
|
|
|
|
// 加载中国时区
|
|
loc, _ := time.LoadLocation("Asia/Shanghai")
|
|
// 获取当前时间
|
|
currentTime := time.Now().In(loc)
|
|
|
|
// 获取当前日期
|
|
currentDate := time.Date(currentTime.Year(), currentTime.Month(), currentTime.Day(), 0, 0, 0, 0, currentTime.Location())
|
|
ymd := currentDate.Format("2006-01-02")
|
|
|
|
// 定义开始时间和结束时间
|
|
startTime, _ := time.ParseInLocation("2006-01-02 15:04:05", ymd+" "+logintimeRangeArr[0], loc)
|
|
endTime, _ := time.ParseInLocation("2006-01-02 15:04:05", ymd+" "+logintimeRangeArr[1], loc)
|
|
|
|
// 判断当前时间是否在范围内
|
|
if currentTime.After(startTime) && currentTime.Before(endTime) {
|
|
next.ServeHTTP(w, r)
|
|
} else {
|
|
services.ResponseErrorWithJson(w, 502, "网关登录策略-不在开放时间范围内")
|
|
}
|
|
})
|
|
}
|
|
|
|
// 判断第四位网段 ?.?.?.x
|
|
func parseLast4(ipAddr, startIP, endIP string) bool {
|
|
ipLastIdx := strings.LastIndex(ipAddr, ".")
|
|
ipLastStr := ipAddr[ipLastIdx+1:]
|
|
ipLastInt, err := strconv.Atoi(ipLastStr)
|
|
if err != nil {
|
|
ipLastInt = 0
|
|
}
|
|
|
|
startIPLastIdx := strings.LastIndex(startIP, ".")
|
|
startIPLastStr := ipAddr[startIPLastIdx+1:]
|
|
startIPLastInt, err := strconv.Atoi(startIPLastStr)
|
|
if err != nil {
|
|
startIPLastInt = 0
|
|
}
|
|
|
|
if ipLastInt >= startIPLastInt {
|
|
return true
|
|
}
|
|
|
|
endIPLastIdx := strings.LastIndex(endIP, ".")
|
|
endIPLastStr := ipAddr[endIPLastIdx+1:]
|
|
endIPLastInt, err := strconv.Atoi(endIPLastStr)
|
|
if err != nil {
|
|
endIPLastInt = 0
|
|
}
|
|
|
|
if ipLastInt >= endIPLastInt {
|
|
return true
|
|
}
|
|
return false
|
|
}
|
|
|
|
// 判断前三位网段 x.x.x.?
|
|
func parsePer3(ipAddr, startIP, endIP string) bool {
|
|
ipPerIdx := strings.LastIndex(ipAddr, ".")
|
|
ipPerStr := ipAddr[:ipPerIdx]
|
|
|
|
startIPPerIdx := strings.LastIndex(startIP, ".")
|
|
startIPPerStr := startIP[:startIPPerIdx]
|
|
if ipPerStr == startIPPerStr {
|
|
return true
|
|
}
|
|
|
|
endIPPerIdx := strings.LastIndex(endIP, ".")
|
|
endIPPerStr := endIP[:endIPPerIdx]
|
|
if ipPerStr == endIPPerStr {
|
|
return true
|
|
}
|
|
return false
|
|
}
|