Workerman을 사용하여 온라인 채팅 시스템의 사용자 인증 및 권한 제어 구현

require_once __DIR__ . '/vendor/autoload.php'; use WorkermanWorker; use WorkermanConnectionAsyncTcpConnection; use WorkermanProtocolsHttpRequest; use WorkermanProtocolsHttpResponse; $worker = new Worker('http://0.0.0.0:8080'); $users = [ 'user1' => 'password1', 'user2' => 'password2', // ... ]; $worker->onMessage = function ($connection, Request $request) use ($users) { $path = $request->path(); if ($path === '/login') { $username = $request->post('username'); $password = $request->post('password'); if (!isset($users[$username]) || $users[$username] !== $password) { $response = new Response(401, ['Content-Type' => 'application/json'], json_encode(['error' => 'Invalid credentials'])); $connection->send($response); } else { $token = generateToken(); $response = new Response(200, ['Content-Type' => 'application/json'], json_encode(['token' => $token])); $connection->send($response); } } elseif (substr($path, 0, 7) === '/api/v1') { $token = $request->header('Authorization'); if (!validateToken($token)) { $response = new Response(401, ['Content-Type' => 'application/json'], json_encode(['error' => 'Unauthorized'])); $connection->send($response); } else { // 处理请求逻辑 } } else { $response = new Response(404, ['Content-Type' => 'text/html'], 'Not found'); $connection->send($response); } }; Worker::runAll(); function generateToken() { // 生成Token逻辑 } function validateToken($token) { // 验证Token逻辑 }

require_once __DIR__ . '/vendor/autoload.php'; use WorkermanWorker; use WorkermanConnectionAsyncTcpConnection; use WorkermanProtocolsHttpRequest; use WorkermanProtocolsHttpResponse; $worker = new Worker('http://0.0.0.0:8080'); $roles = [ 'admin' => ['create', 'read', 'update', 'delete'], 'user' => ['read'] ]; $worker->onMessage = function ($connection, Request $request) use ($roles) { $path = $request->path(); $role = getUserRole(); // 根据Token获取用户角色 if (!isset($roles[$role])) { $response = new Response(401, ['Content-Type' => 'application/json'], json_encode(['error' => 'Unauthorized'])); $connection->send($response); return; } $allowedPermissions = $roles[$role]; $requiredPermission = extractRequiredPermission($path); // 根据请求路径提取所需权限 if (!in_array($requiredPermission, $allowedPermissions)) { $response = new Response(403, ['Content-Type' => 'application/json'], json_encode(['error' => 'Forbidden'])); $connection->send($response); return; } // 处理请求逻辑 }; Worker::runAll(); function getUserRole() { // 根据Token获取用户角色的逻辑 } function extractRequiredPermission($path) { // 从请求路径中提取所需权限的逻辑 }