更新

go/controllers/platform_auth_idp.go

@@ -8,6 +8,7 @@ import (
 	"strings"
 
 	"server/models"
+	"server/pkg/identity"
 	"server/pkg/jwtutil"
 
 	beego "github.com/beego/beego/v2/server/web"
@@ -31,30 +32,10 @@ func (c *PlatformAuthIdpController) serveJSON(data map[string]interface{}) {
 
 // Prepare 统一鉴权：仅平台管理员可维护第三方登录配置
 func (c *PlatformAuthIdpController) Prepare() {
-	authHeader := c.Ctx.Request.Header.Get("Authorization")
-	if authHeader == "" {
-		c.Ctx.Output.SetStatus(401)
-		c.serveJSON(map[string]interface{}{"code": 401, "msg": "未登录"})
-		c.StopRun()
-		return
-	}
-	parts := strings.SplitN(authHeader, " ", 2)
-	if len(parts) != 2 || parts[0] != "Bearer" {
-		c.Ctx.Output.SetStatus(401)
-		c.serveJSON(map[string]interface{}{"code": 401, "msg": "认证信息格式错误"})
-		c.StopRun()
-		return
-	}
-	claims, err := jwtutil.ParseToken(parts[1])
-	if err != nil {
-		c.Ctx.Output.SetStatus(401)
-		c.serveJSON(map[string]interface{}{"code": 401, "msg": "登录已失效，请重新登录"})
-		c.StopRun()
-		return
-	}
-	if claims.UserType != "platform" {
-		c.Ctx.Output.SetStatus(403)
-		c.serveJSON(map[string]interface{}{"code": 403, "msg": "无权访问"})
+	if _, err := identity.Claims(c.Ctx.Request.Header.Get("Authorization"), identity.EndPlatform); err != nil {
+		code := identity.Status(err)
+		c.Ctx.Output.SetStatus(code)
+		c.serveJSON(map[string]interface{}{"code": code, "msg": err.Error()})
 		c.StopRun()
 		return
 	}