wangjia
a5e25b444f
实现 server/internal/auth 控制面鉴权底座，对应 doc/02 §4.1、doc/06 §3：
- POST /v1/auth/code：IP+邮箱双维度 Redis 滑窗限频（同邮箱 1/min、同 IP 10/h）
+ 一次性邮箱域黑名单（embed 词表）→ 6 位数字码写 auth:code:{email} TTL 10min
→ 异步发信（SMTP / 开发态 log mailer）。
- POST /v1/auth/register：验码（一次性，删 key；超次数烧码）→ 单事务建号
（uuid + dp_uuid 应用层生成、argon2id）+ 7 天 PRO 试用（source='trial'）→ 签发 JWT。
- POST /v1/auth/login：argon2id 校验（失败恒定时、未知用户走 dummy hash）；
失败计数限流 rl:login:{email} + 锁定；banned 拒绝。
- POST /v1/auth/refresh：RS256，access 15min + refresh 30d 落 Redis 白名单
jwt:refresh:{jti}，旋转时删旧写新；JWT 头带 kid，验证端接受新旧公钥支持轮换。
- RequireAuth 中间件：解析 Bearer access，注入 user id（复用 codes.CtxKeyUserID
避免循环依赖）+ uuid + claims 到 context。
- 错误体统一走 internal/apierr 的 {code, message_zh, message_en}，文案双语脱敏。
- 文件拆分：handler/service/password/token/ratelimit/emailcheck/store/mailer/
middleware/errors/keyloader；config 增加可选 JWT PEM 路径/kid 加载。
测试：password/token/ratelimit/emailcheck/service/handler/middleware 单测
（miniredis，含注册全流程、重复邮箱 409、验证码错误/过期/复用/烧码、限频 429
带 Retry-After、登录失败锁定、banned 拒绝、refresh 旋转后旧 token 失效），
go test -race 通过；集成测试 integration_test.go（testcontainers MySQL8+Redis，
register→login→refresh→受保护接口全链路，构建 tag integration）与 codes 模块同构。
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
92 lines
2.9 KiB
Go
92 lines
2.9 KiB
Go
package auth
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"log"
|
|
"net/smtp"
|
|
"strings"
|
|
)
|
|
|
|
// Mailer delivers a verification code to an email address. Implementations must
|
|
// be safe for concurrent use; Send is typically invoked from a goroutine.
|
|
type Mailer interface {
|
|
SendCode(ctx context.Context, to, code string) error
|
|
}
|
|
|
|
// --------------------------------------------------------------------------
|
|
// SMTP implementation
|
|
// --------------------------------------------------------------------------
|
|
|
|
// SMTPConfig configures the SMTP mailer.
|
|
type SMTPConfig struct {
|
|
Host string // SMTP host (no port)
|
|
Port int // SMTP port, e.g. 587
|
|
Username string
|
|
Password string
|
|
From string // From header, e.g. "Pangolin <no-reply@pangolin.app>"
|
|
}
|
|
|
|
// SMTPMailer sends verification codes over SMTP with STARTTLS (PlainAuth).
|
|
type SMTPMailer struct {
|
|
cfg SMTPConfig
|
|
}
|
|
|
|
// NewSMTPMailer builds an SMTPMailer.
|
|
func NewSMTPMailer(cfg SMTPConfig) *SMTPMailer { return &SMTPMailer{cfg: cfg} }
|
|
|
|
// SendCode delivers the verification code. The message body intentionally
|
|
// contains no product-identifying or destination wording beyond a neutral
|
|
// account-verification notice.
|
|
func (m *SMTPMailer) SendCode(_ context.Context, to, code string) error {
|
|
subject := "Your verification code / 验证码"
|
|
body := fmt.Sprintf(
|
|
"Your verification code is %s. It expires in 10 minutes.\r\n"+
|
|
"您的验证码为 %s，10 分钟内有效。请勿向他人泄露。\r\n",
|
|
code, code)
|
|
|
|
msg := strings.Join([]string{
|
|
"From: " + m.cfg.From,
|
|
"To: " + to,
|
|
"Subject: " + subject,
|
|
"MIME-Version: 1.0",
|
|
"Content-Type: text/plain; charset=UTF-8",
|
|
"",
|
|
body,
|
|
}, "\r\n")
|
|
|
|
addr := fmt.Sprintf("%s:%d", m.cfg.Host, m.cfg.Port)
|
|
auth := smtp.PlainAuth("", m.cfg.Username, m.cfg.Password, m.cfg.Host)
|
|
if err := smtp.SendMail(addr, auth, m.cfg.From, []string{to}, []byte(msg)); err != nil {
|
|
return fmt.Errorf("auth: smtp send: %w", err)
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// --------------------------------------------------------------------------
|
|
// Development log implementation
|
|
// --------------------------------------------------------------------------
|
|
|
|
// LogMailer is a development-only Mailer that prints the code to the process
|
|
// log instead of sending an email. It MUST NOT be used in production — it is
|
|
// the single deliberate exception to the no-secret-in-logs rule, scoped to
|
|
// local development where no real mailbox exists.
|
|
type LogMailer struct {
|
|
logger *log.Logger
|
|
}
|
|
|
|
// NewLogMailer builds a LogMailer. If logger is nil, the standard logger is used.
|
|
func NewLogMailer(logger *log.Logger) *LogMailer {
|
|
return &LogMailer{logger: logger}
|
|
}
|
|
|
|
// SendCode logs the code for local development.
|
|
func (m *LogMailer) SendCode(_ context.Context, to, code string) error {
|
|
if m.logger != nil {
|
|
m.logger.Printf("[dev-mailer] verification code for %s: %s", to, code)
|
|
} else {
|
|
log.Printf("[dev-mailer] verification code for %s: %s", to, code)
|
|
}
|
|
return nil
|
|
}
|