更新

go/controllers/backend_employee_file.go

@@ -10,6 +10,7 @@ import (
 	"time"
 
 	"server/models"
+	"server/pkg/identity"
 	"server/pkg/jwtutil"
 
 	"github.com/beego/beego/v2/client/orm"
@@ -25,22 +26,7 @@ type BackendEmployeeFileController struct {
 }
 
 func (c *BackendEmployeeFileController) efClaims() (*jwtutil.Claims, error) {
-	auth := c.Ctx.Request.Header.Get("Authorization")
-	if auth == "" {
-		return nil, orm.ErrNoRows
-	}
-	parts := strings.SplitN(auth, " ", 2)
-	if len(parts) != 2 || parts[0] != "Bearer" {
-		return nil, orm.ErrNoRows
-	}
-	claims, err := jwtutil.ParseToken(parts[1])
-	if err != nil {
-		return nil, err
-	}
-	if claims.UserType != "backend" {
-		return nil, orm.ErrNoRows
-	}
-	return claims, nil
+	return identity.Claims(c.Ctx.Request.Header.Get("Authorization"), identity.EndBackend)
 }
 
 func (c *BackendEmployeeFileController) efOk(data interface{}) {
@@ -319,7 +305,8 @@ func (c *BackendEmployeeFileController) efAssembleDTOList(tid int, files []model
 func (c *BackendEmployeeFileController) List() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -385,7 +372,8 @@ func (c *BackendEmployeeFileController) List() {
 func (c *BackendEmployeeFileController) Stats() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -408,7 +396,8 @@ func (c *BackendEmployeeFileController) Stats() {
 func (c *BackendEmployeeFileController) Detail() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -525,7 +514,8 @@ func (c *BackendEmployeeFileController) efParsePayload() (employeeFilePayload, b
 func (c *BackendEmployeeFileController) Create() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -609,7 +599,8 @@ func (c *BackendEmployeeFileController) Create() {
 func (c *BackendEmployeeFileController) Update() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -682,7 +673,8 @@ type employeeFileCertificatesPayload struct {
 func (c *BackendEmployeeFileController) UpdateCertificates() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -739,7 +731,8 @@ func (c *BackendEmployeeFileController) UpdateCertificates() {
 func (c *BackendEmployeeFileController) Delete() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -779,7 +772,8 @@ func (c *BackendEmployeeFileController) Delete() {
 func (c *BackendEmployeeFileController) FiledEmployees() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -858,7 +852,8 @@ func (c *BackendEmployeeFileController) efParseRecordPayload() (employeeFileReco
 func (c *BackendEmployeeFileController) CreateRecord() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -904,7 +899,8 @@ func (c *BackendEmployeeFileController) CreateRecord() {
 func (c *BackendEmployeeFileController) UpdateRecord() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId
@@ -956,7 +952,8 @@ func (c *BackendEmployeeFileController) UpdateRecord() {
 func (c *BackendEmployeeFileController) DeleteRecord() {
 	claims, err := c.efClaims()
 	if err != nil {
-		c.efErr(401, 401, "未登录或无权限")
+		code := identity.Status(err)
+		c.efErr(code, code, err.Error())
 		return
 	}
 	tid := claims.TenantId