fix auth #451

Author: sjqzhang

auth.py

@@ -0,0 +1,13 @@
+from flask import  Flask,request
+app = Flask(__name__)
+@app.route('/',methods=["GET", "POST"])
+def index():
+    print(request.headers)
+    auth_token = request.headers.get("auth_token") # check auth_token here
+    print(auth_token)
+    if auth_token=='abc':
+        return 'ok' #success
+    else:
+        return 'fail'
+if __name__ == '__main__':
+    app.run(host='0.0.0.0',debug=True)

server/http_auth.go

@@ -16,14 +16,18 @@ func (c *Server) CheckAuth(w http.ResponseWriter, r *http.Request) bool {
 		result     string
 		jsonResult JsonResult
 	)
-	if err = r.ParseForm(); err != nil {
-		log.Error(err)
+
+	// 直接从请求头中获取认证信息（例如 auth_token）
+	authToken := r.Header.Get("Auth-Token")
+	if authToken == "" {
+		log.Warn("auth_token is missing")
+		// w.WriteHeader(http.StatusUnauthorized)
 		return false
 	}
 	req = httplib.Post(Config().AuthUrl)
 	req.SetTimeout(time.Second*10, time.Second*10)
-	req.Param("__path__", r.URL.Path)
-	req.Param("__query__", r.URL.RawQuery)
+	// req.Param("__path__", r.URL.Path)
+	// req.Param("__query__", r.URL.RawQuery)
 	for k, _ := range r.Form {
 		req.Param(k, r.FormValue(k))
 	}

server/http_info.go

@@ -478,14 +478,15 @@ func (c *Server) Index(w http.ResponseWriter, r *http.Request) {
 					  <input type="text" id="code" name="code" value="" /></span>
 					 <span class="form-line">自定义认证(auth_token):
 					  <input type="text" id="auth_token" name="auth_token" value="" /></span>
-					<input type="submit" name="submit" value="upload" />
+					<button type="button" id="submit" value="upload" >上传</button>
                 </form>
 				</div>
                  <div>断点续传（如果文件很大时可以考虑）</div>
 				<div>
 				 
 				  <div id="drag-drop-area"></div>
 				  <script src="https://transloadit.edgly.net/releases/uppy/v0.30.0/dist/uppy.min.js"></script>
+				  <script src="/%s/static/js/jquery.min.js"></script>
 				  <script>var uppy = Uppy.Core().use(Uppy.Dashboard, {
 					  inline: true,
 					  target: '#drag-drop-area'
@@ -499,6 +500,33 @@ func (c *Server) Index(w http.ResponseWriter, r *http.Request) {
 					uppy.setMeta({ auth_token: '9ee60e59-cb0f-4578-aaba-29b9fc2919ca',callback_url:'http://127.0.0.1/callback'})//自定义参数与普通上传类似（虽然支持自定义，建议不要自定义，海量文件情况下，自定义很可能给自已给埋坑）
                 </script>
 				</div>
+				<script>
+				$(document).ready(function() {
+					$("#submit").click(function(e) {
+						e.preventDefault(); // 阻止表单默认提交
+						
+						var formData = new FormData($("form").get(0));
+						var authToken = $("#auth_token").val(); // 获取 auth_token 输入框的值
+						
+						$.ajax({
+							url: $("form").attr('action'),
+							type: 'POST',
+							data: formData,
+							headers: {
+								'auth-token': authToken // 将 auth_token 放入请求头
+							},
+							processData: false,
+							contentType: false,
+							success: function(response) {
+								alert("上传成功"+response);
+							},
+							error: function(xhr, status, error) {
+								alert("上传失败: " + error);
+							}
+						});
+					});
+				});
+				</script>
 			  </body>
 			</html>`
 		uppyFileName := STATIC_DIR + "/uppy.html"
@@ -512,7 +540,7 @@ func (c *Server) Index(w http.ResponseWriter, r *http.Request) {
 			c.util.WriteFile(uppyFileName, uppy)
 		}
 		fmt.Fprintf(w,
-			fmt.Sprintf(uppy, uploadUrl, Config().DefaultScene, uploadBigUrl))
+			fmt.Sprintf(uppy, uploadUrl, Config().DefaultScene, Config().Group, uploadBigUrl))
 	} else {
 		w.Write([]byte("web upload deny"))
 	}

server/http_upload.go

@@ -74,7 +74,18 @@ func (c *Server) Upload(w http.ResponseWriter, r *http.Request) {
 		folder string
 		fpTmp  *os.File
 		fpBody *os.File
+		result JsonResult
 	)
+	if Config().AuthUrl != "" {
+		if !c.CheckAuth(w, r) {
+			msg:= "auth fail"
+			// log.Warn(msg, r.Form)
+			c.NotPermit(w, r)
+			result.Message = msg
+			w.Write([]byte(c.util.JsonEncodePretty(result)))
+			return
+		}
+	}
 	if r.Method == http.MethodGet {
 		c.upload(w, r)
 		return
@@ -201,16 +212,7 @@ func (c *Server) upload(w http.ResponseWriter, r *http.Request) {
 		}
 	}
 	result.Status = "fail"
-	if Config().AuthUrl != "" {
-		if !c.CheckAuth(w, r) {
-			msg = "auth fail"
-			log.Warn(msg, r.Form)
-			c.NotPermit(w, r)
-			result.Message = msg
-			w.Write([]byte(c.util.JsonEncodePretty(result)))
-			return
-		}
-	}
+
 	if r.Method == http.MethodPost {
 		md5sum = r.FormValue("md5")
 		fileName = r.FormValue("filename")