Go TOKEN机制与跨域处理过程

import (
    "encoding/base64"
    "encoding/json"
    "strings"
    "time"

    "github.com/dgrijalva/jwt-go"
)

func generateToken(claims jwt.MapClaims) (string, error) {
    token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
    return token.SignedString(jwtSecret)
}

func validateToken(tokenString string) (*jwt.Token, error) {
    token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
        return jwtSecret, nil
    })
    if err != nil {
        return nil, err
    }
    return token, nil
}

import (
    "github.com/rs/cors"
    "net/http"
)

func main() {
    corsMiddleware := cors.New(cors.Options{
        AllowedOrigins:   []string{"http://example.com"}, // 允许的源
        AllowCredentials: true,                                // 允许Cookies
        // 其他配置...
    })

    http.Handle("/", corsMiddleware.Handler(http.HandlerFunc(myHandler)))
    http.ListenAndServe(":8080", nil)
}

func myHandler(w http.ResponseWriter, r *http.Request) {
    tokenString := r.Header.Get("Authorization")
    if tokenString == "" {
        http.Error(w, "Unauthorized", http.StatusUnauthorized)
        return
    }

    token, err := validateToken(tokenString)
    if err != nil {
        http.Error(w, "Invalid token", http.StatusForbidden)
        return
    }

    // 处理请求...
}

func corsMiddlewareHandler(h http.Handler) http.Handler {
    return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
        // CORS处理逻辑
        // TOKEN验证逻辑
        h.ServeHTTP(w, r)
    })
}