删除不需要的库文件，修改数据库中验证问题，增加初始化文件，修改配置实现简单的内存共享测试功能

conf/nginx.conf

@@ -13,8 +13,10 @@ http {
     client_max_body_size 1024M;      #允许最大100k的请求体
     client_body_buffer_size  1024M;   #设置缓冲区大小
 
+    #lua_code_cache off; #关闭代码缓存，修改lua脚本不需要重启
+
     lua_package_path '$prefix/src/?/?.lua;$prefix/src/?.lua;/home/frankly/work/AuthPlatform/src/?/?.lua;/home/frankly/work/AuthPlatform/src/?.lua;;';
-    lua_package_cpath '$prefix/src/share/lib/?.so;;';
+    lua_package_cpath '$prefix/src/share/lib/?.so;/home/frankly/work/AuthPlatform/src/share/lib/?.so;;';
 
     # Path of the file with trusted CA certificates.
     #lua_ssl_trusted_certificate /etc/ssl/certs/ca-certificates.crt;
@@ -22,6 +24,21 @@ http {
     # The verification depth in the server certificates chain.
     #lua_ssl_verify_depth 3;
 
+    # 在 Nginx 启动时执行的 Lua 代码块
+    lua_shared_dict dict_a 1m;
+    init_by_lua_block {
+    -- 定义一个全局变量
+        ngx.log(ngx.INFO, "Initializing global variable")
+        global_var = "Hello, Nginx with Lua!"
+
+        -- 初始化一个共享字典（需要 lua-shared-dict 模块）
+        local shared_dict = ngx.shared.dict_a
+        shared_dict:set("key", "value")
+    }
+
+    #下面代码不能与上面的代码进行共用，否则报错nginx: [emerg] "init_by_lua_file" directive is duplicate
+    #init_by_lua_file '/home/frankly/work/AuthPlatform/src/init.lua';
+
     server {
         listen       9080;
         server_name  127.0.0.1;
@@ -33,7 +50,6 @@ http {
         ## 应用路径 todo 路径问题
         set $APP_PATH '/home/frankly/work/AuthPlatform';
 
-        #access_by_lua_file '${APP_PATH}/src/auth/jwt-auth.lua';
         #数据列表配置
         include 'system/system.conf';
 
@@ -41,6 +57,9 @@ http {
         location /testSQL {
             content_by_lua_file '${APP_PATH}/src/test/testPostgres.lua';
         }
+        location /testRBAC {
+            content_by_lua_file '${APP_PATH}/src/test/testRBAC.lua';
+        }
         location /cjson {
             content_by_lua_file '${APP_PATH}/src/test/test.lua';
         }
@@ -49,5 +68,19 @@ http {
             access_by_lua_file '${APP_PATH}/src/auth/jwt-auth.lua';
             proxy_pass http://192.168.147.1:3000;
         }
+        location = /testSM {
+            content_by_lua_block {
+                cjson = require "cjson.safe"
+                ngx.say(cjson.encode({a = 1, b = 2}))
+                local dict_a = ngx.shared.dict_a;
+                ngx.say("abc=",dict_a:get("abc"))
+
+                -- 访问全局变量
+                ngx.say("Global variable: ", global_var)
+
+                -- 访问共享字典
+                ngx.say("Shared dict value: ", dict_a:get("key"))
+           }
+        }
     }
 }

src/auth/jwt-auth.lua

@@ -43,7 +43,7 @@ if jwt_obj.verified == false then
 end
 
 --判断token是否超时 --令牌已过期
-if jwt_obj.payload.exp and os.time() > jwt_obj.payload.exp then
+if jwt_obj.payload.exp and ngx.time() > jwt_obj.payload.exp then
     ngx.log(ngx.WARN, "token timeout ".. jwt_obj.reason)
     ngx.status = ngx.HTTP_UNAUTHORIZED
     ngx.exit(ngx.HTTP_UNAUTHORIZED)

src/dao/account.lua

@@ -84,6 +84,7 @@ function _M:updateSystemAccount(id, jsonData)
     if ok == false then
         return 0x000001,nil
     end
+    jsonData.update_time = ngx.time()
     --对数据内容进行更新
     return accountModel:where('id', '=', id):update(jsonData)
 end

src/dao/application.lua

@@ -99,7 +99,8 @@ function _M.updateApplication(id, jsonData)
     if ok == false then
         return 0x000001,nil
     end
-    --对数据内容进行更新
+    --对数据内容进行更
+    jsonData.update_time = ngx.time()
     return applicationModel:where('id', '=', id):update(jsonData)
 end
 

src/dao/department.lua

@@ -83,6 +83,7 @@ function _M.updateSystemDepartment(id, jsonData)
     if ok == false then
         return 0x000001,nil
     end
+    jsonData.update_time = ngx.time()
     --对数据内容进行更新
     return departmentModel:where('id', '=', id):update(jsonData)
 end

src/dao/permission.lua

@@ -91,6 +91,7 @@ function _M.updateSystemPermission(id, jsonData)
     if ok == false then
         return 0x000001,nil
     end
+    jsonData.update_time = ngx.time()
     --对数据内容进行更新
     return permissionModel:where('id', '=', id):update(jsonData)
 end

src/dao/role.lua

@@ -84,6 +84,7 @@ function _M:updateSystemRole(id, jsonData)
     if ok == false then
         return 0x000001,nil
     end
+    jsonData.update_time = ngx.time()
     --对数据内容进行更新
     return roleModel:where('id', '=', id):update(jsonData)
 end

src/init.lua

@@ -0,0 +1,14 @@
+---
+--- Generated by EmmyLua(https://github.com/EmmyLua)
+--- Created by frankly.
+--- DateTime: 2025/11/3 18:44
+---
+
+print("init application...")
+
+cjson = require "cjson"
+local dict_a = ngx.shared.dict_a
+local v = dict_a:get("abc")
+if not v then
+   dict_a:set("abc", 9)
+end

src/service/system/user.lua

@@ -7,9 +7,22 @@ local resp = require("util.response")
 local userDao = require("dao.user")
 local validatorJson = require("validator.system.user")
 local cjson = require("cjson.safe")
+local token = require("util.token")
 
 local _M = {}
 
+--验证用户id与token中的用户id是否一致
+local function getUserId()
+    --获取请求头中的令牌数据
+    local auth_header = ngx.var.http_Authorization
+    --验证数据的正确性
+    local retToken = token.authorizationToken(auth_header)
+    --token前面已经进行验证，不需要进行判断
+    --验证成功获取用户id信息
+    local userid = retToken["body"]["payload"]["userid"]
+    return userid
+end
+
 --获取所有用户信息
 function _M.getSystemUsers()
     --获取页码和请求的数据量
@@ -23,6 +36,12 @@ end
 
 --根据用户id获取用户信息
 function _M.getSystemUser(m)
+    local userid = getUserId()
+    if userid ~= m.id then
+        ngx.log(ngx.WARN, "用户与使用token中的用户id不一致")
+        ngx.status = ngx.HTTP_NOT_ALLOWED
+        ngx.exit(ngx.HTTP_NOT_ALLOWED)
+    end
     local code,ret = userDao.getSystemUser(m.id)
     local result = resp:json(code, ret)
     resp:send(result)
@@ -59,6 +78,12 @@ end
 
 --根据用户id删除用户信息
 function _M.updateSystemUser(m)
+    local userid = getUserId()
+    if userid ~= m.id then
+        ngx.log(ngx.WARN, "用户与使用token中的用户id不一致")
+        ngx.status = ngx.HTTP_NOT_ALLOWED
+        ngx.exit(ngx.HTTP_NOT_ALLOWED)
+    end
     --读取请求体的数据
     ngx.req.read_body()
     --获取请求数据

src/share/snowflake.lua

@@ -127,23 +127,23 @@ end
 
 --获取当前时间戳(毫秒)
 function snowflake:getCurrentTimestamp()
-	local timestamp = os.time()
+	local timestamp = ngx.time()
 	return timestamp
 end
 
 --获取新的时间戳
 function snowflake:getNextTimestamp(lastTimestamp)
-	local timestamp = math.floor(os.time());
+	local timestamp = math.floor(ngx.time());
     while (timestamp <= lastTimestamp) 
     do
-        timestamp = math.floor(os.time());
+        timestamp = math.floor(ngx.time());
     end
     return timestamp;
 end
 
 -- 雪花算法的实现
 function snowflake:generateUniqueId()
-	--local curtime = os.time()
+	--local curtime = ngx.time()
 	--print("current time: ", curtime)
 	local timestamp = self.getCurrentTimestamp()  -- 当前时间戳（毫秒）
 	 -- 如果是同一时间生成的，则进行毫秒内序列

src/test/test.lua

@@ -7,7 +7,7 @@
 local helpers = require("share.helpers")
 local jsonschema = require("jsonschema")
 local cjson = require("cjson.safe")
---
+
 --local workerId = 0 -- 假设当前机器的ID是1，范围在[0, 31]之间
 --local datacenterId = 0 -- 数据中心ID，范围在[0, 31]之间
 --local snow = snowflake.new(workerId, datacenterId)
@@ -16,6 +16,9 @@ local cjson = require("cjson.safe")
 
 --max =a and b or c--a?b:c
 
+local mylib = require "addlib"
+ngx.say(addlib.add(5,7))
+
 --[[
 local uuid = require("resty.jit-uuid")
 uuid.seed()
@@ -33,6 +36,7 @@ local pageSize = args["pagesize"] or 10
 ngx.say("pageNum:", pageNum, " pageSize:", pageSize)
 --]]
 
+--[[
 local schema = {
     type = 'object',
     properties = {
@@ -53,6 +57,7 @@ if not result then
 end
 local token = string.sub(auth_header,8)
 ngx.say(token)
+--]]
 
 --local sampleJson = [[{"raw_header":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9","signature":"zkKAmXifqWDrMaLpXe8hrA1JpDRbdlgwS-yxNnQUOBw","raw_payload":"eyJpYXQiOjE3NjE4OTIwNDMsImV4cCI6MTc2MTg5NTY0MywidXNlcmlkIjoiYWRtaW4iLCJyb2xlIjoiIn0","valid":true,"verified":true,"reason":"everything is awesome~ :p","header":{"alg":"HS256","typ":"JWT"},"payload":{"iat":1761892043,"userid":"admin","exp":1761895643,"role":""}}]]
 ----解析json字符串

src/test/testRBAC.lua

@@ -26,7 +26,7 @@ permission_system:assign_role("user002", "user_manager")
 permission_system:assign_role("admin001", "super_admin")
 
 -- 测试权限验证
-print("=== RBAC权限验证测试 ===")
+ngx.say("=== RBAC权限验证测试 ===")
 
 -- 测试用户001（guest角色）
 local test_cases = {
@@ -46,17 +46,17 @@ local test_cases = {
 for _, test in ipairs(test_cases) do
     local result = permission_system:check_permission(test.user_id, test.resource, test.action)
     local status = result == test.expected and "✓ 通过" or "✗ 失败"
-    print(string.format("%s 用户:%s 资源:%s 方法:%s 结果:%s",
+    ngx.say(string.format("%s 用户:%s 资源:%s 方法:%s 结果:%s",
             status, test.user_id, test.resource, test.action, tostring(result)))
 end
 
 -- 显示用户权限列表
-print("\n=== 用户权限列表 ===")
+ngx.say("\n=== 用户权限列表 ===")
 local users = {"user001", "user002", "admin001"}
 for _, user_id in ipairs(users) do
     local permissions = permission_system:get_user_permissions(user_id)
-    print(string.format("用户 %s 的权限:", user_id))
+    ngx.say(string.format("用户 %s 的权限:", user_id))
     for _, perm in ipairs(permissions) do
-        print(string.format("  - %s %s", perm.action, perm.resource))
+        ngx.say(string.format("  - %s %s", perm.action, perm.resource))
     end
 end

src/util/response.lua

@@ -16,7 +16,7 @@ function _M:json(status, message, data, http_status)
 		--end
         msg = error_code[status]
 	end
-	local response = {code=status, msg=msg, result=data,timestamp=os.time()}
+	local response = {code=status, msg=msg, result=data,timestamp=ngx.time()}
 	if not response.code then
 		response.code = -1
 		response.message = 'not find status code'
@@ -34,7 +34,7 @@ function _M:json(status, data, http_status)
     local response_status = http_status or ngx.OK
     msg = error_code[status]
 
-    local response = {code=status, msg=msg, result=data,timestamp=os.time()}
+    local response = {code=status, msg=msg, result=data,timestamp=ngx.time()}
     if not response.code then
         response.code = -1
         response.message = 'not find status code'
@@ -51,7 +51,7 @@ function _M:raw(http_status, http_body)
 		code = http_status,
 		headers = {},
 		body = http_body,
-        timestamp = os.time()
+        timestamp = ngx.time()
 	}
 end
 

src/util/token.lua

@@ -26,8 +26,8 @@ local obj = {
         role = "",                  -- 角色
         --iss = "your_issuer",      -- 签发者
         --sub = "1234567890",       -- 主题
-        exp = os.time() + 3600,     -- 过期时间（例如：当前时间+1小时）
+        exp = ngx.time() + 3600,     -- 过期时间（例如：当前时间+1小时）
-        iat = os.time()             -- 签发时间
+        iat = ngx.time()             -- 签发时间
     }
 }
 
@@ -76,7 +76,7 @@ function _M.authorizationToken(auth_header)
         return response
     end
     --判断token是否超时
-    if jwt_obj.payload.exp and os.time() > jwt_obj.payload.exp then
+    if jwt_obj.payload.exp and ngx.time() > jwt_obj.payload.exp then
         response["code"] = 401
         response["message"] = "令牌已过期"
         return response