12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849 |
- package middleware
- import (
- "net/http"
- "time"
- "github.com/gin-gonic/gin"
- )
- // 阻止缓存响应
- func NoCache() gin.HandlerFunc {
- return func(ctx *gin.Context) {
- ctx.Header("Cache-Control", "no-cache, no-store, max-age=0, must-revalidate, value")
- ctx.Header("Expires", "Thu, 01 Jan 1970 00:00:00 GMT")
- ctx.Header("Last-Modified", time.Now().UTC().Format(http.TimeFormat))
- ctx.Next()
- }
- }
- // 响应 options 请求, 并退出
- func Options() gin.HandlerFunc {
- return func(ctx *gin.Context) {
- if ctx.Request.Method != "OPTIONS" {
- ctx.Next()
- } else {
- ctx.Header("Access-Control-Allow-Origin", ctx.GetHeader("origin"))
- ctx.Header("Access-Control-Allow-Credentials", "true")
- ctx.Header("Access-Control-Allow-Methods", "GET,POST,PUT,PATCH,DELETE,OPTIONS")
- ctx.Header("Access-Control-Allow-Headers", "authorization, origin, content-type, accept, x-token")
- ctx.Header("Allow", "HEAD,GET,POST,PUT,PATCH,DELETE,OPTIONS")
- ctx.Header("Content-Type", "application/json")
- ctx.AbortWithStatus(200)
- }
- }
- }
- // 安全设置
- func Secure() gin.HandlerFunc {
- return func(ctx *gin.Context) {
- ctx.Header("Access-Control-Allow-Origin", ctx.GetHeader("origin"))
- ctx.Header("Access-Control-Allow-Credentials", "true")
- ctx.Header("X-Frame-Options", "DENY")
- ctx.Header("X-Content-Type-Options", "nosniff")
- ctx.Header("X-XSS-Protection", "1; mode=block")
- if ctx.Request.TLS != nil {
- ctx.Header("Strict-Transport-Security", "max-age=31536000")
- }
- }
- }
|