golang实现审核流程

router := mux.NewRouter()
router.HandleFunc("/article/add", Addarticle)
router.HandleFunc("/article/list", GetArticles)
router.HandleFunc("/audit/list", GetAuditList)
router.HandleFunc("/audit/pass", AuditPass)
router.HandleFunc("/audit/reject", AuditReject)

//生成JWT Token
func createToken(user string) (string, error) {
    token := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
        "user":user,
        "exp":time.Now().Add(time.Hour * 24).Unix(),
    })
    return token.SignedString([]byte("mysecret"))
}

//中间件JWT认证
func tokenMiddleware(handler http.HandlerFunc) http.HandlerFunc {
    return func(writer http.ResponseWriter, request *http.Request) {
        tokenString := request.Header.Get("Authorization")
        if tokenString == "" {
            http.Error(writer, "Token required", http.StatusUnauthorized)
            return
        }
        tokenString = strings.Replace(tokenString, "Bearer ", "", -1)
        token, err := jwt.Parse(tokenString, func(token *jwt.Token) (interface{}, error) {
            return []byte("mysecret"), nil
        })
        if err != nil || !token.Valid {
            http.Error(writer, "Unauthorized", http.StatusUnauthorized)
            return
        }
        handler(writer, request)
    }
}

// 添加文章
func AddArticle(writer http.ResponseWriter, request *http.Request) {
    title := request.FORMValue("title")
    content := request.FormValue("content")
    if title == "" || content == "" {
        http.Error(writer, "Invalid params", http.StatusBadRequest)
        return
    }

    // 获取当前用户
    user, ok := request.Context().Value("user").(string)
    if !ok {
        http.Error(writer, "Unauthorized", http.StatusUnauthorized)
        return
    }

    // 添加文章
    status := "wait"
    err := db.Exec("INSERT INTO articles (title, content, status, create_time, author) VALUES (?, ?, ?, ?, ?)", title, content, status, time.Now().Unix(), user).Error
    if err != nil {
        http.Error(writer, err.Error(), http.StatusBadRequest)
        return
    }

    writer.Write([]byte("success"))
}

// 获取文章列表
func GetArticles(writer http.ResponseWriter, request *http.Request) {
    // 获取当前用户
    user, ok := request.Context().Value("user").(string)
    if !ok {
        http.Error(writer, "Unauthorized", http.StatusUnauthorized)
        return
    }

    // 获取文章列表
    var articles []Article
    err := db.Where("author = ?", user).Find(&articles).Error
    if err != nil {
        http.Error(writer, err.Error(), http.StatusBadRequest)
        return
    }

    // 返回文章列表
    writer.Header().Set("Content-Type", "application/JSON")
    json.NewEncoder(writer).Encode(articles)
}

// 获取审核列表
func GetAuditList(writer http.ResponseWriter, request *http.Request) {
    // 获取当前用户
    user, ok := request.Context().Value("user").(string)
    if !ok {
        http.Error(writer, "Unauthorized", http.StatusUnauthorized)
        return
    }

    // 查询审核列表
    var articles []Article
    err := db.Where("status = ?", "wait").Find(&articles).Error
    if err != nil {
        http.Error(writer, err.Error(), http.StatusBadRequest)
        return
    }

    // 返回审核列表
    writer.Header().Set("Content-Type", "application/json")
    json.NewEncoder(writer).Encode(articles)
}

// 审核通过
func AuditPass(writer http.ResponseWriter, request *http.Request) {
    id := request.FormValue("id")
    if id == "" {
        http.Error(writer, "Invalid params", http.StatusBadRequest)
        return
    }

    // 获取当前用户
    user, ok := request.Context().Value("user").(string)
    if !ok {
        http.Error(writer, "Unauthorized", http.StatusUnauthorized)
        return
    }

    // 审核文章
    status := "pass"
    err := db.Exec("UPDATE articles SET status = ?, audit_id = ?, audit_time = ? WHERE id = ?", status, user, time.Now().Unix(), id).Error
    if err != nil {
        http.Error(writer, err.Error(), http.StatusBadRequest)
        return
    }

    writer.Write([]byte("success"))
}

// 审核拒绝
func AuditReject(writer http.ResponseWriter, request *http.Request) {
    id := request.FormValue("id")
    if id == "" {
        http.Error(writer, "Invalid params", http.StatusBadRequest)
        return
    }

    // 获取当前用户
    user, ok := request.Context().Value("user").(string)
    if !ok {
        http.Error(writer, "Unauthorized", http.StatusUnauthorized)
        return
    }

    // 审核文章
    status := "reject"
    err := db.Exec("UPDATE articles SET status = ?, audit_id = ?, audit_time = ? WHERE id = ?", status, user, time.Now().Unix(), id).Error
    if err != nil {
        http.Error(writer, err.Error(), http.StatusBadRequest)
        return
    }

    writer.Write([]byte("success"))
}