mengstack-api/internal/app/middleware/tenant.go
MengStack Dev df809f1045
Some checks failed
CI / Build & Test (push) Failing after 1m31s
feat: user CRUD API + dashboard stats + kernel infrastructure
- Add user management endpoints (list/create/get/update/delete) with pagination and search
- Add dashboard stats endpoint with tenant/user/online counts and growth metrics
- Add tenant resolver middleware for multi-tenant request scoping
- Add i18n kernel with zh/en message files and AcceptLanguage middleware
- Add WebSocket hub/handler for real-time communication
- Add job scheduler kernel with cron support
- Add plugin sandbox for isolated execution
- Add storage kernel (local filesystem)
- Add event bus kernel for pub/sub
- Add cache kernel abstraction
- Add database migration runner and version upgrade checker
- Add rate limiting middleware with Redis backend
- Add SQL migrations for rbac, audit_logs, settings, notifications, examples
- Extend user repository with list/delete/count operations
- Register all module routes with tenant resolver
2026-10-03 03:42:58 +08:00

64 lines
1.5 KiB
Go

package middleware
import (
"net/http"
"mengstack/internal/kernel/errors"
"mengstack/internal/kernel/response"
"mengstack/internal/kernel/tenant"
"github.com/gin-gonic/gin"
)
func MultiTenant(resolver tenant.Resolver) gin.HandlerFunc {
return func(c *gin.Context) {
headerVal := c.GetHeader("X-Tenant-ID")
queryVal := c.Query("tenant_id")
tenantID, ok := resolver.Resolve(headerVal, queryVal)
if !ok {
response.Fail(c, errors.ErrTenantRequired)
c.Abort()
return
}
c.Set("tenant_id", tenantID)
ctx := tenant.WithTenantID(c.Request.Context(), tenantID)
c.Request = c.Request.WithContext(ctx)
c.Next()
}
}
func OptionalTenant(resolver tenant.Resolver) gin.HandlerFunc {
return func(c *gin.Context) {
headerVal := c.GetHeader("X-Tenant-ID")
queryVal := c.Query("tenant_id")
tenantID, ok := resolver.Resolve(headerVal, queryVal)
if ok {
c.Set("tenant_id", tenantID)
ctx := tenant.WithTenantID(c.Request.Context(), tenantID)
c.Request = c.Request.WithContext(ctx)
}
c.Next()
}
}
func CORS() gin.HandlerFunc {
return func(c *gin.Context) {
c.Header("Access-Control-Allow-Origin", "*")
c.Header("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS")
c.Header("Access-Control-Allow-Headers", "Origin, Content-Type, Accept, Authorization, X-Tenant-ID, X-Request-ID")
c.Header("Access-Control-Expose-Headers", "X-Request-ID")
c.Header("Access-Control-Max-Age", "86400")
if c.Request.Method == http.MethodOptions {
c.AbortWithStatus(http.StatusNoContent)
return
}
c.Next()
}
}