Golang での安全なネットワーク通信のための gRPC の使用

$ go get -u github.com/golang/protobuf/protoc-gen-go
$ go get -u google.golang.org/grpc

syntax = "proto3";

message LoginRequest {
  string username = 1;
  string password = 2;
}

message LoginResponse {
  bool success = 1;
  string token = 2;
}

service AuthService {
  rpc Login(LoginRequest) returns (LoginResponse);
}

$ protoc --go_out=plugins=grpc:. auth.proto

package main

import (
    "context"
    "log"
    "net"

    "google.golang.org/grpc"
    "google.golang.org/grpc/credentials"
)

// ...

type authService struct{}

func (a *authService) Login(ctx context.Context, req *pb.LoginRequest) (*pb.LoginResponse, error) {
    // 处理登录请求
    // ...
    return &pb.LoginResponse{
        Success: true,
        Token:   "YOUR_AUTH_TOKEN",
    }, nil
}

func main() {
    lis, err := net.Listen("tcp", ":8080")
    if err != nil {
        log.Fatalf("failed to listen: %v", err)
    }

    // 加载TLS证书
    creds, err := credentials.NewServerTLSFromFile("cert.pem", "key.pem")
    if err != nil {
        log.Fatalf("failed to load TLS credentials: %v", err)
    }

    // 创建gRPC服务器
    server := grpc.NewServer(grpc.Creds(creds))

    // 注册服务
    pb.RegisterAuthServiceServer(server, &authService{})

    log.Println("gRPC server is running at :8080")
    err = server.Serve(lis)
    if err != nil {
        log.Fatalf("failed to start gRPC server: %v", err)
    }
}

func main() {
    // 加载根证书
    creds, err := credentials.NewClientTLSFromFile("ca.pem", "")
    if err != nil {
        log.Fatalf("failed to load CA root certificates: %v", err)
    }

    // 创建与服务器的连接
    conn, err := grpc.Dial("localhost:8080", grpc.WithTransportCredentials(creds))
    if err != nil {
        log.Fatalf("failed to dial server: %v", err)
    }
    defer conn.Close()

    client := pb.NewAuthServiceClient(conn)

    // 调用登录服务
    resp, err := client.Login(context.TODO(), &pb.LoginRequest{
        Username: "your_username",
        Password: "your_password",
    })
    if err != nil {
        log.Fatalf("failed to login: %v", err)
    }

    log.Printf("Login response: %v", resp)
}