feat: 优化web

internal/auth/middleware/bearer.go

@@ -0,0 +1,41 @@
+package middleware
+
+import (
+	"strings"
+
+	"giter.top/smart/internal/auth/oauth2"
+	"github.com/gin-gonic/gin"
+)
+
+// Context keys for auth principal
+const (
+	CtxUserID   = "auth_user_id"
+	CtxTenantID = "auth_tenant_id"
+	CtxScope    = "auth_scope"
+)
+
+// NewBearer 解析 opaque Bearer access_token，写入上下文；无 Bearer 或无效时继续放行（兼容未迁移接口）。
+func NewBearer(store *oauth2.Store) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		h := c.GetHeader("Authorization")
+		const prefix = "Bearer "
+		if !strings.HasPrefix(h, prefix) {
+			c.Next()
+			return
+		}
+		raw := strings.TrimSpace(strings.TrimPrefix(h, prefix))
+		if raw == "" {
+			c.Next()
+			return
+		}
+		p, err := store.LookupAccessToken(c.Request.Context(), raw)
+		if err != nil {
+			c.Next()
+			return
+		}
+		c.Set(CtxUserID, p.UserID)
+		c.Set(CtxTenantID, p.TenantID)
+		c.Set(CtxScope, p.Scope)
+		c.Next()
+	}
+}