更新

go/controllers/backend_organization.go

@@ -6,6 +6,7 @@ import (
 	"strings"
 
 	"server/models"
+	"server/pkg/identity"
 	"server/pkg/jwtutil"
 
 	"github.com/beego/beego/v2/client/orm"
@@ -123,13 +124,8 @@ type positionDTO struct {
 
 // claims 解析 Authorization 头中的 JWT，要求是租户端（backend）用户且带有效租户ID。
 func (c *BackendOrganizationController) claims() (*jwtutil.Claims, bool) {
-	auth := strings.TrimSpace(c.Ctx.Request.Header.Get("Authorization"))
-	parts := strings.SplitN(auth, " ", 2)
-	if len(parts) != 2 || parts[0] != "Bearer" {
-		return nil, false
-	}
-	claims, err := jwtutil.ParseToken(parts[1])
-	if err != nil || claims.UserType != "backend" || claims.TenantId <= 0 {
+	claims, err := identity.Claims(c.Ctx.Request.Header.Get("Authorization"), identity.EndBackend)
+	if err != nil || claims.TenantId <= 0 {
 		return nil, false
 	}
 	return claims, true