Microservice identity authentication and authorization system built using Go language

Microservice identity authentication and authorization system built using Go language

With the rise of microservice architecture, identity authentication and authorization system has become an important part of building distributed applications. An indispensable part. In this article, we will introduce how to use Go language to build a simple but powerful microservice authentication and authorization system, and attach code examples.

First, we need to determine the authentication method. In microservice architecture, common identity authentication methods include token-based authentication and JWT (JSON Web Token)-based authentication. In this example, we will use JWT-based authentication.

In order to generate and verify JWT, we can use third-party libraries in Go language. Here, we choose to use the github.com/dgrijalva/jwt-go library.

First, we need to import this library in the Go program:

import (
    "github.com/dgrijalva/jwt-go"
)

Next, we need to define a key for signing JWT. This key should be a random string used to ensure the security of the JWT. In practical applications, we can store the key in an environment variable to improve security.

var signingKey = []byte("ThisIsASecretKey")

Then, we need to define a structure to represent the user's identity information. In this example, we only save the user ID and role information. Based on actual needs, we can add more fields as needed.

type User struct {
    ID     int64  `json:"id"`
    Role   string `json:"role"`
}

Next, we need to implement a function to generate JWT. This function receives a user object as parameter and returns a new JWT string.

func GenerateToken(user User) (string, error) {
    claims := jwt.MapClaims{
        "id":   user.ID,
        "role": user.Role,
    }
    token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
    return token.SignedString(signingKey)
}

Then, we need to implement a function to verify the JWT. This function receives a JWT string as parameter and returns the parsed user object.

func ValidateToken(tokenString string) (User, error) {
    token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
        return signingKey, nil
    })
    if err != nil {
        return User{}, err
    }
    if claims, ok := token.Claims.(jwt.MapClaims); ok && token.Valid {
        return User{
            ID:   int64(claims["id"].(float64)),
            Role: claims["role"].(string),
        }, nil
    }
    return User{}, errors.New("Invalid token")
}

Finally, we can use these functions in our microservices for authentication and authorization. When the user logs in, we can generate a JWT and return it to the user. When a user makes a request, we can validate the JWT and check the user's role information to determine if they have access.

func LoginHandler(w http.ResponseWriter, r *http.Request) {
    // 验证用户身份...
    // 生成JWT
    token, _ := GenerateToken(user)
    // 将JWT返回给用户
    w.Write([]byte(token))
}

func SecureHandler(w http.ResponseWriter, r *http.Request) {
    // 验证JWT
    tokenString := r.Header.Get("Authorization")
    user, err := ValidateToken(tokenString)
    if err != nil {
        w.WriteHeader(http.StatusUnauthorized)
        w.Write([]byte("Unauthorized"))
        return
    }
    // 检查用户角色...
    // 处理请求...
    w.Write([]byte("Authorized"))
}

Through the above example, we can see how to use Go language to build a simple but powerful microservice authentication and authorization system. Of course, in actual applications, we may need to add more features, such as refresh tokens, single sign-on, etc. But whether it is a simple or complex application scenario, the powerful functions of the Go language and rich third-party libraries can support us in building a safe and reliable identity authentication and authorization system.

The above is the detailed content of Microservice identity authentication and authorization system built using Go language. For more information, please follow other related articles on the PHP Chinese website!