用Golang写一个OAuth2服务端

在Golang中实现OAuth2客户端需要使用到golang.org/x/oauth2包。该包提供了OAuth2客户端的实现，支持不同的授权类型和存储后端，如内存、MySQL、PostgreSQL等。下面我们来看一下如何在Golang中实现OAuth2客户端，并使用MySQL作为存储后端。

安装MySQL驱动程序

go get github.com/go-sql-driver/mysql

创建MySQL表

CREATE TABLE users (
  id INT(11) NOT NULL AUTO_INCREMENT,
  username VARCHAR(32) NOT NULL,
  password VARCHAR(255) NOT NULL,
  PRIMARY KEY (id),
  UNIQUE KEY (username)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
CREATE TABLE clients (
  id INT(11) NOT NULL AUTO_INCREMENT,
  client_id VARCHAR(32) NOT NULL,
  client_secret VARCHAR(255) NOT NULL,
  redirect_uri VARCHAR(255) NOT NULL,
  PRIMARY KEY (id),
  UNIQUE KEY (client_id)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
CREATE TABLE tokens (
  id INT(11) NOT NULL AUTO_INCREMENT,
  user_id INT(11) NOT NULL,
  client_id INT(11) NOT NULL,
  access_token VARCHAR(255) NOT NULL,
  refresh_token VARCHAR(255) NOT NULL,
  expires_in INT(11) NOT NULL,
  create_time TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
  update_time TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
  PRIMARY KEY (id),
  UNIQUE KEY (access_token),
  UNIQUE KEY (refresh_token),
  FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE ON UPDATE CASCADE,
  FOREIGN KEY (client_id) REFERENCES clients(id) ON DELETE CASCADE ON UPDATE CASCADE
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;

• users：用于存储用户信息，包括用户ID、用户名、密码等字段
• clients：用于存储客户端信息，包括客户端ID、客户端密钥、重定向URI等字段
• tokens：用于存储授权信息，包括授权码、访问令牌、刷新令牌等字段

建立MySQL连接

import (
    "database/sql"
    "fmt"
    "log"
    "github.com/go-sql-driver/mysql"
    "golang.org/x/oauth2"
)
func main() {
    // 建立 MySQL 连接
    config := &mysql.Config{
        User:                 "root",
        Passwd:               "password",
        Net:                  "tcp",
        Addr:                 "localhost:3306",
        DBName:               "oauth2",
        AllowNativePasswords: true,
    }
    db, err := sql.Open("mysql", config.FormatDSN())
    if err != nil {
        log.Fatalf("Failed to open database connection: %v", err)
    }
    defer db.Close()
    // TODO: 实现 OAuth2 授权服务器
}

定义用户、客户端和授权信息的数据结构

type User struct {
    ID       int64  `json:"id"`
    Username string `json:"username"`
    Password string `json:"-"`
}
type Client struct {
    ID           int64  `json:"id"`
    ClientID     string `json:"client_id"`
    ClientSecret string `json:"client_secret"`
    RedirectURI  string `json:"redirect_uri"`
}
type Token struct {
    ID          int64     `json:"id"`
    UserID      int64     `json:"-"`
    ClientID    int64     `json:"-"`
    AccessToken string    `json:"access_token"`
    TokenType   string    `json:"token_type"`
    ExpiresIn   int64     `json:"expires_in"`
    RefreshToken string    `json:"refresh_token"`
    CreateTime  time.Time `json:"create_time"`
    UpdateTime  time.Time `json:"update_time"`
}
// 在 MySQL 中创建表结构
_, err = db.Exec(`
    CREATE TABLE IF NOT EXISTS users (
        id INT(11) NOT NULL AUTO_INCREMENT,
        username VARCHAR(32) NOT NULL,
        password VARCHAR(255) NOT NULL,
        PRIMARY KEY (id),
        UNIQUE KEY (username)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
    CREATE TABLE IF NOT EXISTS clients (
        id INT(11) NOT NULL AUTO_INCREMENT,
        client_id VARCHAR(32) NOT NULL,
        client_secret VARCHAR(255) NOT NULL,
        redirect_uri VARCHAR(255) NOT NULL,
        PRIMARY KEY (id),
        UNIQUE KEY (client_id)
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
    CREATE TABLE IF NOT EXISTS tokens (
        id INT(11) NOT NULL AUTO_INCREMENT,
        user_id INT(11) NOT NULL,
        client_id INT(11) NOT NULL,
        access_token VARCHAR(255) NOT NULL,
        token_type VARCHAR(32) NOT NULL,
        expires_in INT(11) NOT NULL,
        refresh_token VARCHAR(255) NOT NULL,
        create_time TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
        update_time TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
        PRIMARY KEY (id),
        UNIQUE KEY (access_token),
        UNIQUE KEY (refresh_token),
        FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE ON UPDATE CASCADE,
        FOREIGN KEY (client_id) REFERENCES clients(id) ON DELETE CASCADE ON UPDATE CASCADE
    ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
`)
if err != nil {
    log.Fatalf("Failed to create tables: %v", err)
}

实现 OAuth2 授权服务器的接口

// 实现 OAuth2 授权服务器的接口
func handleAuthorize(db *sql.DB) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        // TODO: 实现授权页面
    }
}
func handleToken(db *sql.DB) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        // TODO: 实现获取令牌的接口
    }
}
func handleUserInfo(db *sql.DB) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        // TODO: 实现获取用户信息的接口
    }
}
// 实现 OAuth2 授权服务器
func main() {
    // 建立 MySQL 连接
    config := &mysql.Config{
        User:                 "root",
        Passwd:               "password",
        Net:                  "tcp",
        Addr:                 "localhost:3306",
        DBName:               "oauth2",
        AllowNativePasswords: true,
    }
    db, err := sql.Open("mysql", config.FormatDSN())
    if err != nil {
        log.Fatalf("Failed to open database connection: %v", err)
    }
    defer db.Close()
    // 实现 OAuth2 授权服务器的路由
    http.HandleFunc("/authorize", handleAuthorize(db))
    http.HandleFunc("/token", handleToken(db))
    http.HandleFunc("/userinfo", handleUserInfo(db))
    // 启动 HTTP 服务器
    log.Fatal(http.ListenAndServe(":8080", nil))
}