accounts/rag-server
Haitao Pan e95f5fffa1 feat(auth): implement rag-server remote auth middleware
Implement complete authentication middleware for rag-server:
- Remote token verification via accounts-service
- 60s TTL cache with background GC
- Gin middleware integration
- Role-based access control
- Zero-trust architecture (no private keys)
- Health check endpoint

Files:
- internal/auth/client.go (350 lines)
- internal/auth/middleware_verify.go (280 lines)
- internal/auth/cache.go (180 lines)
- internal/auth/example_test.go (150 lines)
- internal/auth/README.md (550 lines)
- cmd/xcontrol-server/main.go (updated)
- config/config.go (added AuthCfg)
- config/server.yaml (removed secrets)

🤖 Generated with [Claude Code](https://claude.com/claude-code)
2025-11-05 21:01:20 +08:00
..
api Move RAG module under rag-server (#526) 2025-10-15 13:27:37 +08:00
cmd feat(auth): implement rag-server remote auth middleware 2025-11-05 21:01:20 +08:00
config feat(auth): implement rag-server remote auth middleware 2025-11-05 21:01:20 +08:00
internal feat(auth): implement rag-server remote auth middleware 2025-11-05 21:01:20 +08:00
migrations Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
proxy Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
sql refactor(postgresql): replace zhparser+scws with pg_jieba; update Makefile and setup scripts 2025-10-30 15:16:32 +08:00
cors.go Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
Makefile update rag-server/Makefile 2025-10-15 14:36:37 +08:00
server.go Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00