更新

go/controllers/backend_oa_compensation.go

@@ -11,6 +11,7 @@ import (
 	"time"
 
 	"server/models"
+	"server/pkg/identity"
 	"server/pkg/jwtutil"
 
 	"github.com/beego/beego/v2/client/orm"
@@ -24,13 +25,10 @@ type BackendOaCompensationController struct {
 }
 
 func (c *BackendOaCompensationController) compensationClaims() (*jwtutil.Claims, error) {
-	auth := c.Ctx.Request.Header.Get("Authorization")
-	parts := strings.SplitN(auth, " ", 2)
-	if auth == "" || len(parts) != 2 || parts[0] != "Bearer" {
-		return nil, orm.ErrNoRows
-	}
-	claims, err := jwtutil.ParseToken(parts[1])
-	if err != nil || claims.UserType != "backend" {
+	// 调用方一律用 orm.ErrNoRows 判「未登录/无权」，这里保持该约定，
+	// 只把令牌解析与判端交给 identity。
+	claims, err := identity.Claims(c.Ctx.Request.Header.Get("Authorization"), identity.EndBackend)
+	if err != nil {
 		return nil, orm.ErrNoRows
 	}
 	return claims, nil