feat: 初始化仓库
This commit is contained in:
42
annotation/auth.py
Normal file
42
annotation/auth.py
Normal file
@@ -0,0 +1,42 @@
|
||||
# _*_ coding : UTF-8 _*_
|
||||
# @Time : 2025/01/26 16:01
|
||||
# @UpdateTime : 2025/01/26 16:01
|
||||
# @Author : sonder
|
||||
# @File : auth.py
|
||||
# @Software : PyCharm
|
||||
# @Comment : 本程序为权限装饰器定义
|
||||
from functools import wraps
|
||||
|
||||
from fastapi import Request
|
||||
|
||||
from controller.login import LoginController
|
||||
from exceptions.exception import PermissionException
|
||||
|
||||
|
||||
class Auth:
|
||||
"""
|
||||
权限装饰器
|
||||
"""
|
||||
|
||||
def __init__(self, permission_list: list):
|
||||
"""
|
||||
权限装饰器
|
||||
:param permission_list: 权限列表
|
||||
"""
|
||||
self.permission_list = permission_list
|
||||
|
||||
def __call__(self, func):
|
||||
@wraps(func)
|
||||
async def wrapper(request: Request, *args, **kwargs):
|
||||
# 获取上下文信息
|
||||
token = request.headers.get('Authorization') # 直接使用 request 对象
|
||||
current_user = await LoginController.get_current_user(request, token)
|
||||
permissions = current_user.get('permissions')
|
||||
for permission in set(permissions):
|
||||
if permission in self.permission_list:
|
||||
# 如果用户有权限,继续执行接口逻辑
|
||||
return await func(request, *args, **kwargs)
|
||||
# 如果用户没有权限,返回错误信息
|
||||
raise PermissionException(message="该用户无此接口权限!")
|
||||
|
||||
return wrapper
|
||||
Reference in New Issue
Block a user