Init

internal/middleware/auth_middleware.go

@@ -0,0 +1,24 @@
+package middleware
+
+import (
+	"cs-agent/internal/services"
+
+	"github.com/kataras/iris/v12"
+	"github.com/mlogclub/simple/web"
+)
+
+func AuthMiddleware(ctx iris.Context) {
+	if !authenticateRequest(ctx) {
+		return
+	}
+	ctx.Next()
+}
+
+func authenticateRequest(ctx iris.Context) bool {
+	if _, err := services.AuthService.Authenticate(ctx); err != nil {
+		_ = ctx.JSON(web.JsonError(err))
+		ctx.StopExecution()
+		return false
+	}
+	return true
+}

internal/middleware/open_im_middleware.go

@@ -0,0 +1,46 @@
+package middleware
+
+import (
+	"cs-agent/internal/pkg/irisx"
+	"cs-agent/internal/pkg/openidentity"
+	"cs-agent/internal/services"
+	"strings"
+
+	"github.com/kataras/iris/v12"
+	"github.com/mlogclub/simple/web"
+)
+
+// OpenImContextMiddleware 校验 X-Channel-Id / channelId 对应启用 web 渠道；除 /api/open/im/widget 外解析并缓存外部访客身份。
+func OpenImContextMiddleware(ctx iris.Context) {
+	channelID := strings.TrimSpace(ctx.GetHeader("X-Channel-Id"))
+	if channelID == "" {
+		channelID = strings.TrimSpace(ctx.URLParam("channelId"))
+	}
+	if channelID == "" {
+		ctx.StopExecution()
+		_ = ctx.JSON(web.JsonErrorMsg("channelId不能为空"))
+		return
+	}
+	channel := services.ChannelService.GetEnabledWebChannelByChannelID(channelID)
+	if channel == nil {
+		ctx.StopExecution()
+		_ = ctx.JSON(web.JsonErrorMsg("接入渠道不存在或已停用"))
+		return
+	}
+	irisx.SetOpenImChannel(ctx, channel)
+
+	path := ctx.Path()
+	if strings.Contains(path, "/open/im/widget") {
+		ctx.Next()
+		return
+	}
+
+	ext, err := openidentity.GetExternalInfo(ctx)
+	if err != nil {
+		ctx.StopExecution()
+		_ = ctx.JSON(web.JsonError(err))
+		return
+	}
+	irisx.SetOpenImExternalInfo(ctx, ext)
+	ctx.Next()
+}

internal/middleware/ws_middleware.go

@@ -0,0 +1,84 @@
+package middleware
+
+import (
+	"cs-agent/internal/models"
+	"cs-agent/internal/pkg/errorsx"
+	"cs-agent/internal/pkg/openidentity"
+	"cs-agent/internal/services"
+	"log/slog"
+	"strings"
+
+	"github.com/kataras/iris/v12"
+	"github.com/mlogclub/simple/web"
+)
+
+func ConsoleWsMiddleware(ctx iris.Context) {
+	principal := services.AuthService.GetAuthPrincipal(ctx)
+	if principal == nil {
+		if _, err := services.AuthService.Authenticate(ctx); err != nil {
+			_ = ctx.StopWithJSON(iris.StatusUnauthorized, map[string]any{
+				"message": err.Error(),
+			})
+			return
+		}
+		principal = services.AuthService.GetAuthPrincipal(ctx)
+	}
+	if err := services.WsService.UpgradeAdminConnection(ctx, principal); err != nil {
+		slog.Error("upgrade admin websocket failed", "error", err, "path", ctx.Path())
+		ctx.StopExecution()
+		return
+	}
+}
+
+func OpenImWsMiddleware(ctx iris.Context) {
+	channel, err := resolveEnabledChannelForWS(ctx)
+	if err != nil {
+		_ = ctx.StopWithJSON(iris.StatusBadRequest, map[string]any{
+			"message": err.Error(),
+		})
+		return
+	}
+
+	// 与 Open IM HTTP 一致：优先站内 AuthPrincipal；否则使用外部访客身份（Header/query，见 openidentity）。
+	// 二者不应在业务上同时作为「客户身份」使用；本入口在 principal 非空时不再解析 external，避免语义冲突。
+	principal := services.AuthService.GetAuthPrincipal(ctx)
+	var external *openidentity.ExternalInfo
+	if principal == nil {
+		ext, err := openidentity.GetExternalInfo(ctx)
+		if err != nil {
+			_ = ctx.StopWithJSON(iris.StatusUnauthorized, map[string]any{
+				"message": err.Error(),
+			})
+			return
+		}
+		external = ext
+	}
+	if err := services.WsService.UpgradeUserConnection(ctx, principal, external); err != nil {
+		slog.Error("upgrade open im websocket failed", "error", err, "path", ctx.Path(), "channelId", channel.ChannelID, "channel_id", channel.ID)
+		ctx.StopExecution()
+		return
+	}
+}
+
+func resolveEnabledChannelForWS(ctx iris.Context) (*models.Channel, error) {
+	channel, rsp := requireEnabledChannel(ctx)
+	if rsp == nil {
+		return channel, nil
+	}
+	return nil, errorsx.InvalidParam("接入渠道不存在或已停用")
+}
+
+func requireEnabledChannel(ctx iris.Context) (*models.Channel, *web.JsonResult) {
+	channelID := strings.TrimSpace(ctx.GetHeader("X-Channel-Id"))
+	if channelID == "" {
+		channelID = strings.TrimSpace(ctx.URLParam("channelId"))
+	}
+	if channelID == "" {
+		return nil, web.JsonErrorMsg("channelId不能为空")
+	}
+	channel := services.ChannelService.GetEnabledWebChannelByChannelID(channelID)
+	if channel == nil {
+		return nil, web.JsonErrorMsg("接入渠道不存在或已停用")
+	}
+	return channel, nil
+}