woord-core-service/model/users.go

package model

import (
	"crypto/hmac"
	"crypto/sha256"
	"errors"
	"fmt"
	"woord-core-service/global"

	"gorm.io/gorm"
)

var (
	ErrUserNotFound            = fmt.Errorf("用户不存在")
	ErrUserNameAlreadyExists   = fmt.Errorf("用户名已存在")
	ErrWrongUserNameOrPassword = fmt.Errorf("用户名或密码错误")
)

// 用户
type User struct {
	*gorm.Model

	// 用户名
	Name string `gorm:"unique;index"`

	// 用户密码，保存为 HS256 散列值
	Password string

	// 用户所有词库
	Dicts []Dict
}

type UserResult struct {
	ID   uint   `json:"id"`
	Name string `json:"name"`
}

// 计算密码的 HS256 散列值
func hashPassword(password string) string {
	mac := hmac.New(sha256.New, global.SecretKey)
	mac.Write([]byte(password))
	return fmt.Sprintf("%x", mac.Sum(nil))
}

// 获取用户
func GetUser(id uint) (*UserResult, error) {
	result := &UserResult{}
	if err := global.DB.Model(&User{}).Take(result, "id = ?", id).Error; err != nil {
		if errors.Is(err, gorm.ErrRecordNotFound) {
			return nil, ErrUserNotFound
		}
		return nil, err
	}
	return result, nil
}

// 创建用户
func CreateUser(name, password string) (*UserResult, error) {
	if err := global.DB.Model(&User{}).Take(&struct{ ID uint }{}, "name = ?", name).Error; !errors.Is(err, gorm.ErrRecordNotFound) {
		if err != nil {
			return nil, err
		}
		return nil, ErrUserNameAlreadyExists
	}

	password = hashPassword(password)

	user := &User{
		Name:     name,
		Password: password,
	}
	if err := global.DB.Select("name", "password").Create(user).Error; err != nil {
		return nil, err
	}
	return &UserResult{
		ID:   user.ID,
		Name: user.Name,
	}, nil
}

// 认证用户
func AuthenticateUser(name, password string) (*UserResult, error) {
	password = hashPassword(password)

	result := &UserResult{}
	if err := global.DB.Model(&User{}).Take(result, "name = ? AND password = ?", name, password).Error; err != nil {
		if errors.Is(err, gorm.ErrRecordNotFound) {
			return nil, ErrWrongUserNameOrPassword
		}
		return nil, err
	}
	return result, nil
}