gin里中间件BasicAuth认证

//模拟私人数据
// 真实环境中Redis 或 mysql 获取
var secrets = gin.H{
	"foot":   gin.H{"email": "foot@qq.com", "phone": 123456789},
	"basket": gin.H{"email": "basket@qq.com", "phone": 987654321},
	"Winnie": gin.H{"email": "Winnie@qq.com", "phone": 3.1415926},
}

	func main() {
		r := gin.Default()

		// Group using gin.BasicAuth() middleware
		// gin.Accounts is a shortcut for map[string]string
		// gin.Accounts 记录用户名和密码
	//这些用户数据 可以从数据库查询 gorm
	//BasicAuth,它接受 map[string]字符串作为参数，其中键是用户名，值是密码。
	//type Accounts map[string]string  Accounts为授权登录的用户/传递列表定义一个键/值
		authorized := r.Group("/admin", gin.BasicAuth(gin.Accounts{
			"foo":    "bar",//用户名：密码
			"austin": "1234",
			"lena":   "hello2",
			"manu":   "4321",
		}))

		// /admin/secrets endpoint
		// hit "localhost:8080/admin/secrets

		authorized.GET("/secrets", handlers)

		// Listen and serve on 0.0.0.0:8080
		r.Run(":8080")
	}




func handlers(c *gin.Context) {
	// get user, it was set by the BasicAuth middleware
	// 获取user 请求头即从上下文取值
	user := c.MustGet(gin.AuthUserKey).(string)
	if secret, ok := secrets[user]; ok {
		c.JSON(http.StatusOK, gin.H{"user": user, "secret": secret})
	} else {
		c.JSON(http.StatusOK, gin.H{"user": user, "secret": "NO SECRET :("})
	}
}

postman 测试