From 7883a7427d6b0bc1552ae50e79f4c83789846dd4 Mon Sep 17 00:00:00 2001
From: Leon <147289645+LeoninCS@users.noreply.github.com>
Date: Tue, 16 Dec 2025 18:50:10 +0800
Subject: [PATCH] =?UTF-8?q?feat:=20=E6=B7=BB=E5=8A=A0=E4=BA=86SoftJWTAuth?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 internal/middleware/jwt.go | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/internal/middleware/jwt.go b/internal/middleware/jwt.go
index a8eebd1..b6bab26 100644
--- a/internal/middleware/jwt.go
+++ b/internal/middleware/jwt.go
@@ -48,6 +48,40 @@ func JWTAuth(accountRepo *account.AccountRepository) gin.HandlerFunc {
 	}
 }
 
+func SoftJWTAuth(accountRepo *account.AccountRepository) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		authHeader := c.GetHeader("Authorization")
+		if authHeader == "" {
+			c.Next()
+			return
+		}
+
+		parts := strings.SplitN(authHeader, " ", 2)
+		if len(parts) != 2 || !strings.EqualFold(parts[0], "Bearer") {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "invalid authorization header"})
+			return
+		}
+
+		tokenString := parts[1]
+
+		claims, err := auth.ParseToken(tokenString)
+		if err != nil {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "invalid or expired token"})
+			return
+		}
+
+		accountInfo, err := accountRepo.FindByID(c.Request.Context(), claims.AccountID)
+		if err != nil || accountInfo.Token == "" || accountInfo.Token != tokenString {
+			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "token has been revoked"})
+			return
+		}
+
+		c.Set("accountID", claims.AccountID)
+		c.Set("username", claims.Username)
+
+		c.Next()
+	}
+}
 func GetAccountID(c *gin.Context) (uint, error) {
 	uidValue, exists := c.Get("accountID")
 	if !exists {