Web应用后端认证与交互：Go与AJAX的实践指南

package main

import (
    "fmt"
    "log"
    "net/http"

    "github.com/gorilla/mux"
)

type User struct {
    ID   string `json:"id"`
    Name string `json:"name"`
}

func GetUser(w http.ResponseWriter, r *http.Request) {
    vars := mux.Vars(r)
    id := vars["id"]

    // 模拟从数据库获取用户数据
    user := User{ID: id, Name: "Example User"}

    // 将用户数据编码为 JSON 并返回
    w.Header().Set("Content-Type", "application/json")
    if err := json.NewEncoder(w).Encode(user); err != nil {
        http.Error(w, err.Error(), http.StatusInternalServerError)
        return
    }
}

func main() {
    router := mux.NewRouter()
    router.HandleFunc("/users/{id}", GetUser).Methods("GET")

    fmt.Println("Server listening on port 8000")
    log.Fatal(http.ListenAndServe(":8000", router))
}

$.ajax({
  url: "/users/123",
  type: "GET",
  dataType: "json",
  success: function(data) {
    console.log(data); // 输出用户信息
  },
  error: function(error) {
    console.error(error);
  }
});

package main

import (
    "fmt"
    "log"
    "net/http"
    "time"

    "github.com/dchest/authcookie"
)

var secretKey = []byte("your-secret-key") // 替换成一个安全的密钥

func LoginHandler(w http.ResponseWriter, r *http.Request) {
    // 验证用户名和密码 (省略)
    username := "example_user"

    // 创建身份验证 Cookie
    expiration := time.Now().Add(7 * 24 * time.Hour) // Cookie 有效期为 7 天
    cookie := authcookie.New(username, expiration, secretKey)

    // 将 Cookie 设置到 HTTP 响应中
    http.SetCookie(w, &http.Cookie{
        Name:     "auth",
        Value:    cookie,
        Path:     "/",
        HttpOnly: true, // 阻止客户端脚本访问 Cookie
        Secure:   true,   // 仅在 HTTPS 连接中发送 Cookie
    })

    fmt.Fprintln(w, "Login successful!")
}

func ProtectedHandler(w http.ResponseWriter, r *http.Request) {
    // 从 Cookie 中获取身份验证令牌
    cookie, err := r.Cookie("auth")
    if err != nil {
        http.Error(w, "Unauthorized", http.StatusUnauthorized)
        return
    }

    // 验证身份验证令牌
    username := authcookie.Verify(cookie.Value, secretKey)
    if username == "" {
        http.Error(w, "Unauthorized", http.StatusUnauthorized)
        return
    }

    fmt.Fprintf(w, "Welcome, %s!\n", username)
}

func main() {
    http.HandleFunc("/login", LoginHandler)
    http.HandleFunc("/protected", ProtectedHandler)

    fmt.Println("Server listening on port 8000")
    log.Fatal(http.ListenAndServe(":8000", nil))
}