Golang Web表单数据加密与传输安全示例

package main

import (
    "fmt"
    "log"
    "net/http"
)

func formHandler(w http.ResponseWriter, r *http.Request) {
    if r.Method == "POST" {
        // 处理表单数据
        username := r.FormValue("username")
        password := r.FormValue("password")
        fmt.Fprintf(w, "Received: %s", username)
        // 实际项目中不要直接打印密码
    } else {
        // 返回表单页面（简化版）
        fmt.Fprintf(w, `
            <form method="post">
                <input type="text" name="username" placeholder="Username" />
                <input type="password" name="password" placeholder="Password" />
                <button type="submit">Login</button>
            </form>
        `)
    }
}

func main() {
    http.HandleFunc("/", formHandler)
    fmt.Println("Server starting on https://localhost:8443")

    // 使用自签名证书示例（生产环境应使用正规CA签发）
    err := http.ListenAndServeTLS(":8443", "cert.pem", "key.pem", nil)
    if err != nil {
        log.Fatal("ListenAndServeTLS error: ", err)
    }
}

<script src="https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js"></script>
<script>
function encryptData(data, key) {
    return CryptoJS.AES.encrypt(data, key).toString();
}
document.querySelector('form').onsubmit = function() {
    const pwdInput = document.querySelector('input[name=password]');
    pwdInput.value = encryptData(pwdInput.value, 'shared-secret-key');
}
</script>

import (
    "crypto/aes"
    "crypto/cipher"
    "encoding/base64"
)

func decrypt(encryptedStr, keyStr string) (string, error) {
    data, _ := base64.StdEncoding.DecodeString(encryptedStr)
    key := []byte(keyStr)

    block, err := aes.NewCipher(key)
    if err != nil {
        return "", err
    }

    gcm, err := cipher.NewGCM(block)
    if err != nil {
        return "", err
    }

    nonceSize := gcm.NonceSize()
    if len(data) < nonceSize {
        return "", fmt.Errorf("ciphertext too short")
    }

    nonce, ciphertext := data[:nonceSize], data[nonceSize:]
    plaintext, err := gcm.Open(nil, nonce, ciphertext, nil)
    if err != nil {
        return "", err
    }

    return string(plaintext), nil
}

import "github.com/gorilla/csrf"

http.HandleFunc("/login", csrf.Protect([]byte("32-byte-auth-key"))(formHandler))