feat: 建立可靠通知、吊销与跨实例状态

server-go/internal/middleware/auth.go

@@ -20,16 +20,16 @@ type JWTClaims struct {
 
 // 白名单路径，无需鉴权
 var whitelist = map[string]bool{
-	"/api/v1/health":                     true,
-	"/health":                            true,
-	"/api/health":                        true,
-	"/api/v1/auth/login":                 true,
-	"/auth/login":                        true,
-	"/api/v1/auth/register":              true,
-	"/auth/register":                     true,
-	"/api/v1/auth/refresh":               true,
-	"/auth/refresh":                      true,
-	"/api/v1/video/clips/internal":       true,
+	"/api/v1/health":                        true,
+	"/health":                               true,
+	"/api/health":                           true,
+	"/api/v1/auth/login":                    true,
+	"/auth/login":                           true,
+	"/api/v1/auth/register":                 true,
+	"/auth/register":                        true,
+	"/api/v1/auth/refresh":                  true,
+	"/auth/refresh":                         true,
+	"/api/v1/video/clips/internal":          true,
 	"/api/v1/video/recordings/internal/end": true,
 }
 
@@ -83,7 +83,12 @@ func Auth(cfg *config.Config) gin.HandlerFunc {
 		}
 
 		// 校验令牌是否已被登出吊销
-		if IsRevoked(claims) {
+		revoked, err := IsRevoked(claims)
+		if err != nil {
+			c.AbortWithStatusJSON(http.StatusServiceUnavailable, gin.H{"error": "认证状态服务不可用"})
+			return
+		}
+		if revoked {
 			c.AbortWithStatusJSON(http.StatusUnauthorized, gin.H{"error": "令牌已注销，请重新登录"})
 			return
 		}