更新

go/controllers/backend_menu_front.go

@@ -3,9 +3,8 @@ package controllers
 import (
 	"encoding/json"
 	"server/models"
-	"server/pkg/jwtutil"
+	"server/pkg/identity"
 	"strconv"
-	"strings"
 	"time"
 
 	beego "github.com/beego/beego/v2/server/web"
@@ -15,22 +14,13 @@ type BackendMenuFrontController struct {
 	beego.Controller
 }
 
+// checkAuth 前台菜单只归租户自己维护：必须是 backend 端令牌，且令牌带上企业。
+// 此前只解令牌不判端，app/platform 的令牌也能增删别家的前台菜单。
 func (c *BackendMenuFrontController) checkAuth() (uint64, bool) {
-	authHeader := c.Ctx.Request.Header.Get("Authorization")
-	if authHeader == "" {
-		c.Data["json"] = map[string]interface{}{"code": 401, "msg": "未提供认证信息"}
-		_ = c.ServeJSON()
-		return 0, false
-	}
-	authParts := strings.SplitN(authHeader, " ", 2)
-	if len(authParts) != 2 || authParts[0] != "Bearer" {
-		c.Data["json"] = map[string]interface{}{"code": 401, "msg": "认证信息格式错误"}
-		_ = c.ServeJSON()
-		return 0, false
-	}
-	claims, err := jwtutil.ParseToken(authParts[1])
+	claims, err := identity.Claims(c.Ctx.Request.Header.Get("Authorization"), identity.EndBackend)
 	if err != nil {
-		c.Data["json"] = map[string]interface{}{"code": 401, "msg": "token无效"}
+		code := identity.Status(err)
+		c.Data["json"] = map[string]interface{}{"code": code, "msg": err.Error()}
 		_ = c.ServeJSON()
 		return 0, false
 	}