TODO add friends API

.gitignore

@@ -5,7 +5,6 @@ runtime/
 *.db
 *.log
 *.cookie
-*.json
 go.sum
 .env
 *.exe

apidoc.json

+{
+    "name": "EasyIM",
+    "description": "服务端API接口",
+    "title": "EasyIM接口文档",
+    "url" : "http://127.0.0.1:8888",
+    "sampleUrl": "http://127.0.0.1:8888"
+}
\ No newline at end of file

model/datapack.go

@@ -46,7 +46,7 @@ func (dp DataPack) Pack(data protoreflect.ProtoMessage) (result []byte, err erro
 		result, err = proto.Marshal(data)
 	}
 	if dp.protocol == PROTOCOL_WEBSOCKET {
-		result = WebSocketPackage(result)
+		result = WebSocketPack(result)
 	}
 	if dp.msgFormat != config.MSG_FORMAT_JSON && dp.msgFormat != config.MSG_FORMAT_PROTOBUF {
 		err = fmt.Errorf("msgFormat(%v) can not Pack.", dp.msgFormat)
@@ -56,7 +56,7 @@ func (dp DataPack) Pack(data protoreflect.ProtoMessage) (result []byte, err erro
 
 func (dp DataPack) Unpack(data []byte, result protoreflect.ProtoMessage) error {
 	if dp.protocol == PROTOCOL_WEBSOCKET {
-		data = WebSocketParse(data)
+		data = WebSocketUnpack(data)
 	}
 	if dp.msgFormat == config.MSG_FORMAT_JSON {
 		return json.Unmarshal(data, result)

model/websocket.go

@@ -10,7 +10,7 @@ func BytesCombine(pBytes ...[]byte) []byte {
 	return bytes.Join(pBytes, []byte(""))
 }
 
-func WebSocketParse(data []byte) []byte {
+func WebSocketUnpack(data []byte) []byte {
 	en_bytes := []byte("")
 	cn_bytes := make([]int, 0)
 
@@ -71,7 +71,7 @@ func WebSocketParse(data []byte) []byte {
 	return en_bytes
 }
 
-func WebSocketPackage(data []byte) []byte {
+func WebSocketPack(data []byte) []byte {
 	lenth := len(data)
 	token := string(0x81)
 	if lenth < 126 {

server/handler/http.go

 package handler
 
 import (
-	"fmt"
-	"time"
-
-	"encoding/json"
-
-	"github.com/iotames/easyim/database"
 	"github.com/iotames/easyim/model"
 )
 
@@ -16,6 +10,11 @@ var HttpApiRoute map[string]func(req *model.Request) error = map[string]func(req
 	"/api/user/logout":        userLogout,
 	"/api/user/check_token":   checkUserToken,
 	"/api/user/refresh_token": userRefreshToken,
+	"/api/user/friends":       getUserFriends,
+	"/api/user/friend/add":    addUserFriend,
+	"/api/user/friend/accept": acceptUserFriend,
+	"/api/user/friend/remove": removeUserFriend,
+	"/api/user/search":        searchUser,
 }
 
 func HttpHandler(req *model.Request) error {
@@ -46,230 +45,16 @@ type UserRegisterForm struct {
 	Nickname string `json:"nickname"`
 }
 
-/**
- * @apiDefine LoginParams
- * @apiBody {String} account 用户登录账号
- * @apiBody {String} password 用户登录密码
- */
-
-/**
- * @api {post} /api/user/register 用户注册
- * @apiName 用户注册接口
- * @apiGroup 用户相关
- * @apiUse LoginParams
- * @apiBody {String} nickname 用户昵称
- * @apiUse PublicCommonParams
- * @apiErrorExample {json} 请求异常示例
- * {"code":400,"msg":"注册失败！登录账号已存在","data":{}}
- * @apiUse LoginOrRegisterSuccessBlock
- */
-func userRegister(req *model.Request) error {
-	postData := UserRegisterForm{}
-	err := req.GetHttpBodyToJson(&postData)
-	if err != nil {
-		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
-	}
-	u := database.User{Account: postData.Account, Nickname: postData.Nickname}
-	u, err = u.Register(postData.Password)
-	if err != nil {
-		return model.ResponseFail(err.Error(), 400).Write(*req)
-	}
-	return loginOrRegisterSuccess(u, *req)
-}
-
-/**
- * @api {post} /api/user/login 用户登录
- * @apiName 用户登录
- * @apiGroup 用户相关
- * @apiUse LoginParams
- * @apiUse PublicCommonParams
- * @apiErrorExample {json} 请求异常示例
- * {"code":400,"msg":"密码不正确","data":{}}
- * @apiUse LoginOrRegisterSuccessBlock
- */
-func userLogin(req *model.Request) error {
-	postData := UserLoginForm{}
-	err := req.GetHttpBodyToJson(&postData)
-	if err != nil {
-		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
-	}
-	user := new(database.User)
-	user.Account = postData.Account
-	database.GetModel(user)
-	if user.ID == 0 {
-		return model.ResponseFail("找不到登录账号", 400).Write(*req)
-	}
-	if !user.CheckPassword(postData.Password) {
-		return model.ResponseFail("密码不正确", 400).Write(*req)
-	}
-	return loginOrRegisterSuccess(*user, *req)
-}
-
-/**
- * @apiDefine LoginOrRegisterSuccessBlock
- * @apiSuccess {String} data.id 用户ID
- * @apiSuccess {String} data.nickname 用户昵称
- * @apiSuccess {String} data.avatar 用户头像
- * @apiSuccess {String} data.access_token 通讯凭证，在IM通讯中或需要身份鉴权的API中使用。 有效期7200秒(2小时)
- * @apiSuccess {String} data.expires_in access_token(通讯凭证)的有效期(一般为7200秒)
- * @apiSuccess {String} data.refresh_token 用于刷新access_token(通讯凭证)，有效期30天
- * @apiSuccessExample {json} 请求成功示例
- * {"code":200,"msg":"success","data":{"access_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2NvdW50IjoiYWNjb3VudFd1aGFucWluZyIsImF2YXRhciI6IiIsImV4cCI6MTY3NzQ3NDkxNCwiaWQiOjE2Mjk0MjA5MjQ5MTI1Mzc2MDB9.IucceY2x7FSB81-nxEj_yMYggYaBnCzEX1GA8LdzPCE","avatar":"https://gw.alipayobjects.com/zos/antfincdn/XAosXuNZyF/BiazfanxmamNRoxxVxka.png","expires_in":7200,"id":"1629420924912537600","nickname":"飞天的猪","refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2NvdW50IjoiYWNjb3VudFd1aGFucWluZyIsImF2YXRhciI6IiIsImV4cCI6MTY4MDA1OTcxNCwiaWQiOjE2Mjk0MjA5MjQ5MTI1Mzc2MDB9.Mu4N8-uegCdq26ocIx7HINmoUgLyrwpqo4cYDslHwzs"}}
- */
-func loginOrRegisterSuccess(u database.User, req model.Request) error {
-	jwtInfo := u.GetJwtInfo()
-	data := model.JsonObject{
-		"id":            fmt.Sprintf("%d", u.ID),
-		"nickname":      u.Nickname,
-		"avatar":        u.Avatar,
-		"access_token":  jwtInfo.AccessToken,
-		"expires_in":    jwtInfo.Expiresin,
-		"refresh_token": jwtInfo.RefreshToken,
-	}
-	return model.ResponseApi(data, "success", 200).Write(req)
+type PostAccessToken struct {
+	AccessToken string `json:"access_token"`
 }
 
-type PostToken struct {
+type PostRefreshToken struct {
 	ResetSecret  bool   `json:"reset_secret"`
 	GrantType    string `json:"grant_type"`
-	AccessToken  string `json:"access_token"`
 	RefreshToken string `json:"refresh_token"`
 }
 
-/**
- * @api {post} /api/user/logout 退出登录
- * @apiGroup 用户相关
- * @apiBody {String} access_token 通讯凭证
- * @apiUse PublicCommonParams
- * @apiErrorExample {json} 请求异常示例
- * {"code":400,"msg":"access_token不正确","data":{}}
- * @apiSuccessExample {json} 请求成功示例
- * {"code":200,"msg":"退出登录成功","data":{}}
- */
-func userLogout(req *model.Request) error {
-	postData := PostToken{}
-	err := req.GetHttpBodyToJson(&postData)
-	if err != nil {
-		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
-	}
-	u := database.User{}
-	err = u.Logout(postData.AccessToken)
-	if err != nil {
-		return model.ResponseFail(err.Error(), 400).Write(*req)
-	}
-	return model.ResponseOk("登出成功").Write(*req)
-}
-
-/**
-* @api {get} /api/user/check_token 校验token
-* @apiGroup 用户相关
-* @apiQuery {String} token 通讯凭证: access_token 或 refresh_token 的值
-* @apiSuccess {integer} code 状态码(请求成功为200)
-* @apiSuccess {string} msg 请求成功提示信息
-* @apiSuccess {Object} data 响应数据
-* @apiError {integer} code 请求异常状态码
-* @apiError {string} msg 请求异常提示信息
-* @apiSuccess {Number} data.expires_in 有效期剩余时间。单位:秒
-* @apiSuccess {String} data.grant_type token授权模式。值为 access_token 或 refresh_token
-* @apiErrorExample {json} 请求异常示例
-* {"code":400,"msg":"access_token不正确","data":{}}
-* @apiSuccessExample {json} 请求成功示例
-* {"code":200,"msg":"success","data":{"expires_in":7130,"grant_type":"access_token"}}
- */
-func checkUserToken(req *model.Request) error {
-	query := req.GetHttpRequest().URL.Query()
-	token := query.Get("token")
-	u := database.User{}
-	claims, err := u.DecodeJwt(token)
-	if err != nil {
-		return model.ResponseFail(err.Error(), 400).Write(*req)
-	}
-	grantType, ok := claims[database.GRANT_TYPE]
-	if !ok {
-		return model.ResponseFail("token 不正确", 400).Write(*req)
-	}
-	_, err = u.GetUserByJwt(token, claims)
-	if err != nil {
-		return model.ResponseFail(err.Error(), 400).Write(*req)
-	}
-	expiredAt, _ := claims["exp"].(json.Number).Int64()
-	expiresIn := expiredAt - time.Now().Unix()
-	data := model.JsonObject{
-		"grant_type": grantType,
-		"expires_in": expiresIn,
-	}
-	return model.ResponseApi(data, "success", 200).Write(*req)
-}
-
-/**
-* @api {post} /api/user/refresh_token 续期token
-* @apiGroup 用户相关
-* @apiSuccess {integer} code 状态码(请求成功为200)
-* @apiSuccess {string} msg 请求成功提示信息
-* @apiSuccess {Object} data 响应数据
-* @apiError {integer} code 请求异常状态码
-* @apiError {string} msg 请求异常提示信息
-* @apiBody {String} grant_type 作用域. 值为: access_token或refresh_token. 告诉服务器刷新哪个token.
-* @apiBody {String} refresh_token 用于刷新access_token或refresh_token
-* @apiBody {Boolean} [reset_secret] 是否重置密钥。默认否false. 重置密钥后，此前使用的access_token和refresh_token都会失效。
-* @apiSuccess {Number} data.expires_in 有效期(秒)。从当前时间开始算起。过完失效。
-* @apiSuccess {String} data.grant_type 当前token的授权模式。值为 access_token 或 refresh_token
-* @apiSuccess {String} data.token 刷新后的 access_token 或 refresh_token 的值
-* @apiErrorExample {json} 请求异常示例
-* {"code":400,"msg":"token不正确","data":{}}
-* @apiSuccessExample {json} 请求成功示例
-*{
-*    "code": 200,
-*    "msg": "success",
-*    "data": {
-*        "expires_in": 7200,
-*        "grant_type": "access_token",
-*        "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2NvdW50Ijoid2hxNzgxNjQiLCJleHAiOjE2Nzc1NzYwOTksImdyYW50X3R5cGUiOiJhY2Nlc3NfdG9rZW4iLCJpZCI6MTYzMDM4MTM4ODg5NTA5NjgzMn0.2Tykk-RhXSyy7KoaxqTCEUEOausy3be_QFh-RIY0Lag"
-*    }
-*}
- */
-func userRefreshToken(req *model.Request) error {
-	postData := PostToken{}
-	err := req.GetHttpBodyToJson(&postData)
-	if err != nil {
-		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
-	}
-	// 验证refresh_token Begin
-	u := new(database.User)
-	claims, err := u.CheckTokenGrantType(postData.RefreshToken, database.REFRESH_TOKEN)
-	if err != nil {
-		return model.ResponseFail(err.Error(), 400).Write(*req)
-	}
-	uu, err := u.GetUserByJwt(postData.RefreshToken, claims)
-	if err != nil {
-		return model.ResponseFail(err.Error(), 400).Write(*req)
-	}
-	// 验证refresh_token End
-	if postData.ResetSecret {
-		// 重置 salt, 使此前颁发的所有token失效
-		u = &uu
-		u.UpdateSalt()
-	}
-	data := model.JsonObject{
-		"grant_type": postData.GrantType,
-		"expires_in": uu.GetTokenExpiresIn(postData.GrantType),
-	}
-	if postData.GrantType == database.ACCESS_TOKEN {
-		data["token"] = uu.GetAccessToken()
-		return model.ResponseApi(data, "success", 200).Write(*req)
-	}
-	if postData.GrantType == database.REFRESH_TOKEN {
-		data["token"] = uu.GetRefreshToken()
-		return model.ResponseApi(data, "success", 200).Write(*req)
-	}
-	return model.ResponseFail("grant_type不正确", 400).Write(*req)
-}
-
-// TODO 我的好友
-// TODO 添加好友
-// TODO 根据用户名搜索用户
-// TODO 删除好友
-
 /**
  * @apiDefine PublicCommonParams
  * @apiSuccess {integer} code 状态码(请求成功为200)

server/handler/httpchat.go

+package handler
+
+// TODO 发起群聊（从好友中选择）
+// TODO 邀请好友进群聊
+// TODO 退出群聊
+// TODO 近期聊天

server/handler/httpfriend.go

+package handler
+
+import (
+	"github.com/iotames/easyim/model"
+)
+
+/**
+ * @api {get} /api/user/friends 好友列表
+ * @apiGroup 好友相关
+ * @apiDescription 获取用户的好友列表（通讯录显示的联系人）
+ * @apiQuery {String} access_token 通讯凭证: access_token 的值
+ * @apiSuccess {integer} code 状态码(请求成功为200)
+ * @apiSuccess {string} msg 请求成功提示信息
+ * @apiSuccess {Object} data 响应数据
+ * @apiSuccess {Number} daa.total 好友总数
+ * @apiSuccess {Object[]} data.items 用户列表
+ * @apiSuccess {String} data.items.id 用户ID
+ * @apiSuccess {String} data.items.account 用户账户名
+ * @apiSuccess {String} data.items.nickname 用户昵称
+ * @apiSuccess {String} data.items.avatar 用户头像
+ * @apiError {integer} code 请求异常状态码
+ * @apiError {string} msg 请求异常提示信息
+ * @apiErrorExample {json} 请求异常示例
+ * {"code":400,"msg":"access_token不正确","data":{}}
+ * @apiSuccessExample {json} 请求成功示例
+ * {"code":200,"msg":"success","data":{}}
+ */
+func getUserFriends(req *model.Request) error {
+	return nil
+}
+
+/**
+ * @api {post} /api/user/friend/add 发起好友邀请
+ * @apiName 发起好友邀请
+ * @apiGroup 好友相关
+ * @apiDescription 搜索用户后，对该用户发送好友邀请。需要用户同意邀请，才能成为正式好友。
+ * @apiBody {String} access_token 发起好友邀请的用户的身份令牌
+ * @apiBody {String} to_user_id 被邀请用户的ID
+ * @apiUse PublicCommonParams
+ * @apiSuccess {String} data.id 本次好友邀请的请求ID
+ * @apiErrorExample {json} 请求异常示例
+ * {"code":400,"msg":"access_token不正确","data":{}}
+ * @apiSuccessExample {json} 请求成功示例
+ * {"code":200,"msg":"success","data":{"id":"1629420924912535555"}}
+ */
+func addUserFriend(req *model.Request) error {
+	return nil
+}
+
+/**
+ * @api {post} /api/user/friend/accept 接受好友邀请
+ * @apiGroup 好友相关
+ * @apiDescription 同意其他用户发过来的好友申请。正式成为好友。
+ * @apiBody {String} access_token 接受好友邀请的用户的身份令牌
+ * @apiBody {String} id 好友邀请的请求ID
+ * @apiUse PublicCommonParams
+ * @apiErrorExample {json} 请求异常示例
+ * {"code":400,"msg":"access_token不正确","data":{}}
+ * @apiSuccessExample {json} 请求成功示例
+ * {"code":200,"msg":"success","data":{}}
+ */
+func acceptUserFriend(req *model.Request) error {
+	return nil
+}
+
+/**
+ * @api {post} /api/user/friend/remove 删除好友
+ * @apiGroup 好友相关
+ * @apiDescription TODO
+ */
+func removeUserFriend(req *model.Request) error {
+	return nil
+}
+
+/**
+ * @api {get} /api/user/search 用户搜索
+ * @apiGroup 好友相关
+ * @apiDescription 根据用户账号搜索用户 TODO
+ */
+func searchUser(req *model.Request) error {
+	return nil
+}

server/handler/httpuser.go

+package handler
+
+import (
+	"fmt"
+	"time"
+
+	"encoding/json"
+
+	"github.com/iotames/easyim/database"
+	"github.com/iotames/easyim/model"
+)
+
+/**
+ * @apiDefine LoginParams
+ * @apiBody {String} account 用户登录账号
+ * @apiBody {String} password 用户登录密码
+ */
+
+/**
+ * @api {post} /api/user/login 用户登录
+ * @apiName 用户登录
+ * @apiGroup 用户与权限
+ * @apiUse LoginParams
+ * @apiUse PublicCommonParams
+ * @apiErrorExample {json} 请求异常示例
+ * {"code":400,"msg":"密码不正确","data":{}}
+ * @apiUse LoginOrRegisterSuccessBlock
+ */
+func userLogin(req *model.Request) error {
+	postData := UserLoginForm{}
+	err := req.GetHttpBodyToJson(&postData)
+	if err != nil {
+		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
+	}
+	user := new(database.User)
+	user.Account = postData.Account
+	database.GetModel(user)
+	if user.ID == 0 {
+		return model.ResponseFail("找不到登录账号", 400).Write(*req)
+	}
+	if !user.CheckPassword(postData.Password) {
+		return model.ResponseFail("密码不正确", 400).Write(*req)
+	}
+	return loginOrRegisterSuccess(*user, *req)
+}
+
+/**
+ * @api {post} /api/user/register 用户注册
+ * @apiName 用户注册接口
+ * @apiGroup 用户与权限
+ * @apiUse LoginParams
+ * @apiBody {String} nickname 用户昵称
+ * @apiUse PublicCommonParams
+ * @apiErrorExample {json} 请求异常示例
+ * {"code":400,"msg":"注册失败！登录账号已存在","data":{}}
+ * @apiUse LoginOrRegisterSuccessBlock
+ */
+func userRegister(req *model.Request) error {
+	postData := UserRegisterForm{}
+	err := req.GetHttpBodyToJson(&postData)
+	if err != nil {
+		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
+	}
+	u := database.User{Account: postData.Account, Nickname: postData.Nickname}
+	u, err = u.Register(postData.Password)
+	if err != nil {
+		return model.ResponseFail(err.Error(), 400).Write(*req)
+	}
+	return loginOrRegisterSuccess(u, *req)
+}
+
+/**
+ * @apiDefine LoginOrRegisterSuccessBlock
+ * @apiSuccess {String} data.id 用户ID
+ * @apiSuccess {String} data.nickname 用户昵称
+ * @apiSuccess {String} data.avatar 用户头像
+ * @apiSuccess {String} data.access_token 通讯凭证，在IM通讯中或需要身份鉴权的API中使用。 有效期7200秒(2小时)
+ * @apiSuccess {String} data.expires_in access_token(通讯凭证)的有效期(一般为7200秒)
+ * @apiSuccess {String} data.refresh_token 用于刷新access_token(通讯凭证)，有效期30天
+ * @apiSuccessExample {json} 请求成功示例
+ * {"code":200,"msg":"success","data":{"access_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2NvdW50IjoiYWNjb3VudFd1aGFucWluZyIsImF2YXRhciI6IiIsImV4cCI6MTY3NzQ3NDkxNCwiaWQiOjE2Mjk0MjA5MjQ5MTI1Mzc2MDB9.IucceY2x7FSB81-nxEj_yMYggYaBnCzEX1GA8LdzPCE","avatar":"https://gw.alipayobjects.com/zos/antfincdn/XAosXuNZyF/BiazfanxmamNRoxxVxka.png","expires_in":7200,"id":"1629420924912537600","nickname":"飞天的猪","refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2NvdW50IjoiYWNjb3VudFd1aGFucWluZyIsImF2YXRhciI6IiIsImV4cCI6MTY4MDA1OTcxNCwiaWQiOjE2Mjk0MjA5MjQ5MTI1Mzc2MDB9.Mu4N8-uegCdq26ocIx7HINmoUgLyrwpqo4cYDslHwzs"}}
+ */
+func loginOrRegisterSuccess(u database.User, req model.Request) error {
+	jwtInfo := u.GetJwtInfo()
+	data := model.JsonObject{
+		"id":            fmt.Sprintf("%d", u.ID),
+		"nickname":      u.Nickname,
+		"avatar":        u.Avatar,
+		"access_token":  jwtInfo.AccessToken,
+		"expires_in":    jwtInfo.Expiresin,
+		"refresh_token": jwtInfo.RefreshToken,
+	}
+	return model.ResponseApi(data, "success", 200).Write(req)
+}
+
+/**
+ * @api {post} /api/user/logout 退出登录
+ * @apiGroup 用户与权限
+ * @apiBody {String} access_token 通讯凭证
+ * @apiUse PublicCommonParams
+ * @apiErrorExample {json} 请求异常示例
+ * {"code":400,"msg":"access_token不正确","data":{}}
+ * @apiSuccessExample {json} 请求成功示例
+ * {"code":200,"msg":"退出登录成功","data":{}}
+ */
+func userLogout(req *model.Request) error {
+	postData := PostAccessToken{}
+	err := req.GetHttpBodyToJson(&postData)
+	if err != nil {
+		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
+	}
+	u := database.User{}
+	err = u.Logout(postData.AccessToken)
+	if err != nil {
+		return model.ResponseFail(err.Error(), 400).Write(*req)
+	}
+	return model.ResponseOk("登出成功").Write(*req)
+}
+
+/**
+* @api {get} /api/user/check_token 校验token
+* @apiGroup 用户与权限
+* @apiQuery {String} token 通讯凭证: access_token 或 refresh_token 的值
+* @apiSuccess {integer} code 状态码(请求成功为200)
+* @apiSuccess {string} msg 请求成功提示信息
+* @apiSuccess {Object} data 响应数据
+* @apiError {integer} code 请求异常状态码
+* @apiError {string} msg 请求异常提示信息
+* @apiSuccess {Number} data.expires_in 有效期剩余时间。单位:秒
+* @apiSuccess {String} data.grant_type token授权模式。值为 access_token 或 refresh_token
+* @apiErrorExample {json} 请求异常示例
+* {"code":400,"msg":"access_token不正确","data":{}}
+* @apiSuccessExample {json} 请求成功示例
+* {"code":200,"msg":"success","data":{"expires_in":7130,"grant_type":"access_token"}}
+ */
+func checkUserToken(req *model.Request) error {
+	query := req.GetHttpRequest().URL.Query()
+	token := query.Get("token")
+	u := database.User{}
+	claims, err := u.DecodeJwt(token)
+	if err != nil {
+		return model.ResponseFail(err.Error(), 400).Write(*req)
+	}
+	grantType, ok := claims[database.GRANT_TYPE]
+	if !ok {
+		return model.ResponseFail("token 不正确", 400).Write(*req)
+	}
+	_, err = u.GetUserByJwt(token, claims)
+	if err != nil {
+		return model.ResponseFail(err.Error(), 400).Write(*req)
+	}
+	expiredAt, _ := claims["exp"].(json.Number).Int64()
+	expiresIn := expiredAt - time.Now().Unix()
+	data := model.JsonObject{
+		"grant_type": grantType,
+		"expires_in": expiresIn,
+	}
+	return model.ResponseApi(data, "success", 200).Write(*req)
+}
+
+/**
+* @api {post} /api/user/refresh_token 续期token
+* @apiGroup 用户与权限
+* @apiSuccess {integer} code 状态码(请求成功为200)
+* @apiSuccess {string} msg 请求成功提示信息
+* @apiSuccess {Object} data 响应数据
+* @apiError {integer} code 请求异常状态码
+* @apiError {string} msg 请求异常提示信息
+* @apiBody {String} grant_type 作用域. 值为: access_token或refresh_token. 告诉服务器刷新哪个token.
+* @apiBody {String} refresh_token 用于刷新access_token或refresh_token
+* @apiBody {Boolean} [reset_secret] 是否重置密钥。默认否false. 重置密钥后，此前使用的access_token和refresh_token都会失效。
+* @apiSuccess {Number} data.expires_in 有效期(秒)。从当前时间开始算起。过完失效。
+* @apiSuccess {String} data.grant_type 当前token的授权模式。值为 access_token 或 refresh_token
+* @apiSuccess {String} data.token 刷新后的 access_token 或 refresh_token 的值
+* @apiErrorExample {json} 请求异常示例
+* {"code":400,"msg":"token不正确","data":{}}
+* @apiSuccessExample {json} 请求成功示例
+*{
+*    "code": 200,
+*    "msg": "success",
+*    "data": {
+*        "expires_in": 7200,
+*        "grant_type": "access_token",
+*        "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhY2NvdW50Ijoid2hxNzgxNjQiLCJleHAiOjE2Nzc1NzYwOTksImdyYW50X3R5cGUiOiJhY2Nlc3NfdG9rZW4iLCJpZCI6MTYzMDM4MTM4ODg5NTA5NjgzMn0.2Tykk-RhXSyy7KoaxqTCEUEOausy3be_QFh-RIY0Lag"
+*    }
+*}
+ */
+func userRefreshToken(req *model.Request) error {
+	postData := PostRefreshToken{}
+	err := req.GetHttpBodyToJson(&postData)
+	if err != nil {
+		return req.ResponseJson(model.ResponseQueryArgsError(err.Error()))
+	}
+	// 验证refresh_token Begin
+	u := new(database.User)
+	claims, err := u.CheckTokenGrantType(postData.RefreshToken, database.REFRESH_TOKEN)
+	if err != nil {
+		return model.ResponseFail(err.Error(), 400).Write(*req)
+	}
+	uu, err := u.GetUserByJwt(postData.RefreshToken, claims)
+	if err != nil {
+		return model.ResponseFail(err.Error(), 400).Write(*req)
+	}
+	// 验证refresh_token End
+	if postData.ResetSecret {
+		// 重置 salt, 使此前颁发的所有token失效
+		u = &uu
+		u.UpdateSalt()
+	}
+	data := model.JsonObject{
+		"grant_type": postData.GrantType,
+		"expires_in": uu.GetTokenExpiresIn(postData.GrantType),
+	}
+	if postData.GrantType == database.ACCESS_TOKEN {
+		data["token"] = uu.GetAccessToken()
+		return model.ResponseApi(data, "success", 200).Write(*req)
+	}
+	if postData.GrantType == database.REFRESH_TOKEN {
+		data["token"] = uu.GetRefreshToken()
+		return model.ResponseApi(data, "success", 200).Write(*req)
+	}
+	return model.ResponseFail("grant_type不正确", 400).Write(*req)
+}