采用中间件授权的方式

api/handler/net_handler.go

@@ -9,6 +9,7 @@ package handler
 
 import (
 	"geekai/core"
+	"geekai/core/middleware"
 	"geekai/core/types"
 	"geekai/service/oss"
 	"geekai/store/model"
@@ -34,9 +35,17 @@ func NewNetHandler(app *core.AppServer, db *gorm.DB, manager *oss.UploaderManage
 
 // RegisterRoutes 注册路由
 func (h *NetHandler) RegisterRoutes() {
-	h.App.Engine.POST("/api/upload", h.Upload)
-	h.App.Engine.POST("/api/upload/list", h.List)
-	h.App.Engine.GET("/api/upload/remove", h.Remove)
+	group := h.App.Engine.Group("/api/upload/")
+
+	// 需要用户授权的接口
+	group.Use(middleware.UserAuthMiddleware(h.App.Config.Session.SecretKey, h.App.Redis))
+	{
+		group.POST("upload", h.Upload)
+		group.POST("list", h.List)
+		group.GET("remove", h.Remove)
+	}
+
+	// 公开接口，不需要授权
 	h.App.Engine.GET("/api/download", h.Download)
 }