golang框架如何处理身份认证和授权？

package main

import (

    "github.com/gin-gonic/gin"

    "github.com/casbin/casbin/v2"

)

// 定义角色和权限

const (

    ROLE_ADMIN = "admin"

    PERM_READ = "read"

    PERM_WRITE = "write"

)

func main() {

    // 设置 Gin 路由

    router := gin.Default()

    // 设置 Casbin 强制执行器

    enforcer, _ := casbin.NewEnforcer("./model.conf", "./policy.csv")

    router.GET("/protected", func(c *gin.Context) {

        // 获取当前用户

        user := c.MustGet("user").(string)

        // 检查用户是否有读权限

        ok, _ := enforcer.Enforce(user, "/protected", PERM_READ)

        if !ok {

            c.AbortWithStatus(403)

            return

        }

        // 允许访问受保护的资源

        c.JSON(200, gin.H{

            "message": "Protected resource accessed",

        })

    })

    // 运行服务器

    router.Run()

}