feat: account.

controllers/login.go

@@ -0,0 +1,117 @@
+package controllers
+
+import (
+	"hr_receiver/config"
+	"hr_receiver/models"
+	"hr_receiver/util"
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+type LoginRequest struct {
+	Username string `json:"username" binding:"required"`
+	Password string `json:"password" binding:"required"`
+}
+
+type RegisterRequest struct {
+	Username string `json:"username" form:"username"`
+	Password string `json:"password" form:"password"`
+}
+
+type AuthResponse struct {
+	Token string      `json:"token"`
+	User  models.User `json:"user"`
+}
+
+// Register 用户注册
+func Register(c *gin.Context) {
+	var req RegisterRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	// 检查用户名是否已存在
+	var existingUser models.User
+	if result := config.DB.Where("username = ?", req.Username).First(&existingUser); result.Error == nil {
+		c.JSON(http.StatusConflict, gin.H{"error": "Username already exists"})
+		return
+	}
+
+	// 创建新用户
+	user := models.User{
+		Username: req.Username,
+		Password: req.Password, // BeforeCreate钩子会自动加密
+	}
+
+	if result := config.DB.Create(&user); result.Error != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to create user"})
+		return
+	}
+
+	// 生成Token
+	token, err := util.GenerateToken(user.ID, user.Username)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to generate token"})
+		return
+	}
+
+	c.JSON(http.StatusCreated, AuthResponse{
+		Token: token,
+		User:  user,
+	})
+}
+
+// Login 用户登录
+func Login(c *gin.Context) {
+	var req LoginRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	// 查找用户
+	var user models.User
+	result := config.DB.Where("username = ?", req.Username).First(&user)
+
+	if result.Error != nil {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Invalid username or password"})
+		return
+	}
+
+	// 验证密码
+	if !user.CheckPassword(req.Password) {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Invalid username or password"})
+		return
+	}
+
+	// 生成JWT Token
+	token, err := util.GenerateToken(user.ID, user.Username)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to generate token"})
+		return
+	}
+
+	c.JSON(http.StatusOK, AuthResponse{
+		Token: token,
+		User:  user,
+	})
+}
+
+// GetProfile 获取用户信息（需要认证）
+func GetProfile(c *gin.Context) {
+	userID, exists := c.Get("userID")
+	if !exists {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Unauthorized"})
+		return
+	}
+
+	var user models.User
+	if result := config.DB.First(&user, userID); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "User not found"})
+		return
+	}
+
+	c.JSON(http.StatusOK, user)
+}

controllers/step_train.go

@@ -33,6 +33,12 @@ func (tc *StepTrainingController) CreateTrainingRecord(c *gin.Context) {
 		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
 		return
 	}
+	username, exists := c.Get("username")
+	if !exists {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "无法获取用户信息，请重新登录"})
+		return
+	}
+	record.Username = username.(string)
 
 	// 使用事务保存数据[4](@ref)
 	err := tc.DB.Transaction(func(tx *gorm.DB) error {
@@ -123,6 +129,11 @@ func (tc *StepTrainingController) GetTrainingRecords(c *gin.Context) {
 		PageNum  int `form:"pageNum,default=1"`   // 页码，默认第一页
 		PageSize int `form:"pageSize,default=10"` // 每页数量，默认10条
 	}
+	username, exists := c.Get("username")
+	if !exists {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "无法获取用户信息，请重新登录"})
+		return
+	}
 
 	var params PaginationParams
 	if err := c.ShouldBindQuery(&params); err != nil {
@@ -147,13 +158,13 @@ func (tc *StepTrainingController) GetTrainingRecords(c *gin.Context) {
 	)
 
 	// 获取总记录数
-	if err := tc.DB.Model(&models.StepTrainRecord{}).Count(&totalRows).Error; err != nil {
+	if err := tc.DB.Model(&models.StepTrainRecord{}).Where("username = ?", username).Count(&totalRows).Error; err != nil {
 		c.JSON(http.StatusInternalServerError, gin.H{"error": "获取记录总数失败"})
 		return
 	}
 
 	// 查询分页数据（按开始时间倒序排列）
-	result := tc.DB.
+	result := tc.DB.Where("username = ?", username).
 		Order("start_time DESC"). // 按开始时间倒序
 		Offset(offset).
 		Limit(params.PageSize).

main.go

@@ -24,6 +24,7 @@ func main() {
 		&models.StepHeartRate{},
 		&models.StepStrideFreq{},
 		&models.RegressionResult{},
+		&models.User{},
 	)
 
 	// 启动服务

middleware/jwt_for_user.go

@@ -0,0 +1,42 @@
+package middleware
+
+import (
+	"hr_receiver/util"
+	"net/http"
+	"strings"
+
+	"github.com/gin-gonic/gin"
+)
+
+func JWTAuth() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		authHeader := c.GetHeader("Authorization")
+		if authHeader == "" {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "Authorization header required"})
+			c.Abort()
+			return
+		}
+
+		// Bearer Token格式
+		parts := strings.SplitN(authHeader, " ", 2)
+		if !(len(parts) == 2 && parts[0] == "Bearer") {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "Authorization header format must be Bearer {token}"})
+			c.Abort()
+			return
+		}
+
+		// 解析Token
+		claims, err := util.ParseToken(parts[1])
+		if err != nil {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "Invalid or expired token"})
+			c.Abort()
+			return
+		}
+
+		// 将用户信息存入上下文
+		c.Set("userID", claims.UserID)
+		c.Set("username", claims.Username)
+
+		c.Next()
+	}
+}

models/step_train.go

@@ -25,6 +25,7 @@ type StepHeartRate struct {
 // 对应Flutter的TrainRecord结构
 type StepTrainRecord struct {
 	gorm.Model
+	Username     string           `gorm:"size:50" json:"username"`    // 对应Dart的tid字段
 	TrainId      uint             `gorm:"uniqueIndex" json:"tid"`     // 对应Dart的tid字段
 	StartTime    int64            `gorm:"type:bigint" json:"time"`    // 开始时间戳
 	EndTime      int64            `gorm:"type:bigint" json:"endTime"` // 结束时间戳[3](@ref)

models/user.go

@@ -0,0 +1,40 @@
+package models
+
+import (
+	"golang.org/x/crypto/bcrypt"
+	"gorm.io/gorm"
+)
+
+type User struct {
+	ID        uint   `gorm:"primaryKey" json:"id"`
+	Username  string `gorm:"uniqueIndex;not null" json:"username"`
+	Email     string `gorm:"uniqueIndex;" json:"email"`
+	Phone     string `gorm:"uniqueIndex;" json:"phone"`
+	Password  string `gorm:"not null" json:"-"`
+	CreatedAt int64  `json:"created_at"`
+	UpdatedAt int64  `json:"updated_at"`
+}
+
+// HashPassword 密码加密
+func (u *User) HashPassword(password string) error {
+	bytes, err := bcrypt.GenerateFromPassword([]byte(password), 14)
+	if err != nil {
+		return err
+	}
+	u.Password = string(bytes)
+	return nil
+}
+
+// CheckPassword 验证密码
+func (u *User) CheckPassword(password string) bool {
+	err := bcrypt.CompareHashAndPassword([]byte(u.Password), []byte(password))
+	return err == nil
+}
+
+// BeforeCreate 创建前钩子
+func (u *User) BeforeCreate(tx *gorm.DB) (err error) {
+	if u.Password != "" {
+		return u.HashPassword(u.Password)
+	}
+	return nil
+}

routes/routes.go

@@ -23,7 +23,7 @@ func SetupRouter() *gin.Engine {
 			records.POST("/analysis-by-ai", trainingController.AnalyzeByAI)
 			// 可扩展其他路由：GET, PUT, DELETE等
 		}
-		steps := v1.Group("/step") //.Use(middleware.AuthMiddleware())
+		steps := v1.Group("/step").Use(middleware.JWTAuth())
 		{
 			steps.POST("", stepTrainController.CreateTrainingRecord)
 			steps.GET("train-records", stepTrainController.GetTrainingRecords)
@@ -31,6 +31,11 @@ func SetupRouter() *gin.Engine {
 			steps.GET("train-rank/:trainId", stepTrainController.GetTrainingRank)
 			// 可扩展其他路由：GET, PUT, DELETE等
 		}
+		public := v1.Group("")
+		{
+			public.POST("/register", controllers.Register)
+			public.POST("/login", controllers.Login)
+		}
 		auth := v1.Group("/auth")
 		{
 			auth.GET("/token", func(c *gin.Context) {

util/jwt.go

@@ -0,0 +1,56 @@
+package util
+
+import (
+	"errors"
+	"time"
+
+	"github.com/golang-jwt/jwt/v5"
+)
+
+var ApiSecret = "your-super-secret-key" // 预共享密钥
+type Claims struct {
+	UserID   uint   `json:"user_id"`
+	Username string `json:"username"`
+	jwt.RegisteredClaims
+}
+
+// GenerateToken 生成JWT Token
+func GenerateToken(userID uint, username string) (string, error) {
+	expirationTime := time.Now().Add(24 * 30 * time.Hour) // Token有效期24小时
+	//expirationTime := time.Now().Add(1 * time.Second) // Token有效期24小时
+
+	claims := &Claims{
+		UserID:   userID,
+		Username: username,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(expirationTime),
+			IssuedAt:  jwt.NewNumericDate(time.Now()),
+			NotBefore: jwt.NewNumericDate(time.Now()),
+			Issuer:    "your-app-name",
+		},
+	}
+
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	tokenString, err := token.SignedString([]byte(ApiSecret))
+
+	return tokenString, err
+}
+
+// ParseToken 解析JWT Token
+func ParseToken(tokenStr string) (*Claims, error) {
+	claims := &Claims{}
+
+	token, err := jwt.ParseWithClaims(tokenStr, claims, func(token *jwt.Token) (interface{}, error) {
+		return []byte(ApiSecret), nil
+	})
+
+	if err != nil {
+		return nil, err
+	}
+
+	if !token.Valid {
+		return nil, errors.New("invalid token")
+	}
+
+	return claims, nil
+}