优化结构

internal/server/middleware/auth.go

@@ -16,6 +16,8 @@ import (
 
 const claimsKey = "admin_claims"
 
+const CodePasswordChangeRequired = 10001
+
 // tokenAuthTimeout bounds a shared token authentication flight. It replaces the
 // leader request's own deadline, which followers must not inherit.
 const tokenAuthTimeout = 10 * time.Second
@@ -62,20 +64,20 @@ func authenticate(c *gin.Context, auth TokenAuthenticator, allowQueryToken bool)
 		return auth.AuthenticateToken(ctx, token)
 	})
 	if err != nil {
-		httpx.SetTokenCookie(c, "", -1)
+		httpx.SetCookie(c, "x-token", "", -1)
 		httpx.NoAuth(c, tokenErrorMessage(err))
 		return false
 	}
 	authentication, ok := value.(*system.TokenAuthentication)
 	if !ok || authentication == nil || authentication.Claims == nil {
-		httpx.SetTokenCookie(c, "", -1)
+		httpx.SetCookie(c, "x-token", "", -1)
 		httpx.NoAuth(c, "无法处理此token")
 		return false
 	}
 	if authentication.Refreshed != nil {
 		c.Header("new-token", authentication.Refreshed.Value)
 		c.Header("new-expires-at", strconv.FormatInt(authentication.Refreshed.ExpiresAt.Unix(), 10))
-		httpx.SetTokenCookie(c, authentication.Refreshed.Value, int(authentication.Refreshed.TTL.Seconds()))
+		httpx.SetCookie(c, "x-token", authentication.Refreshed.Value, int(authentication.Refreshed.TTL.Seconds()))
 	}
 	c.Set(claimsKey, authentication.Claims)
 	return true
@@ -141,6 +143,6 @@ func MustChangePassword() gin.HandlerFunc {
 			c.Next()
 			return
 		}
-		c.AbortWithStatusJSON(http.StatusConflict, httpx.Response{Code: httpx.CodePasswordChangeRequired, Data: gin.H{"needChangePassword": true}, Msg: "密码已过期，请先修改密码"})
+		c.AbortWithStatusJSON(http.StatusConflict, httpx.Response{Code: CodePasswordChangeRequired, Data: gin.H{"needChangePassword": true}, Msg: "密码已过期，请先修改密码"})
 	}
 }