accounts/rag-server/internal
Haitao Pan 96e4c8d719 feat(auth): implement rag-server remote auth middleware
Implement complete authentication middleware for rag-server:
- Remote token verification via accounts-service
- 60s TTL cache with background GC
- Gin middleware integration
- Role-based access control
- Zero-trust architecture (no private keys)
- Health check endpoint

Files:
- internal/auth/client.go (350 lines)
- internal/auth/middleware_verify.go (280 lines)
- internal/auth/cache.go (180 lines)
- internal/auth/example_test.go (150 lines)
- internal/auth/README.md (550 lines)
- cmd/xcontrol-server/main.go (updated)
- config/config.go (added AuthCfg)
- config/server.yaml (removed secrets)

🤖 Generated with [Claude Code](https://claude.com/claude-code)
2025-11-05 21:01:20 +08:00
..
agent Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
auth feat(auth): implement rag-server remote auth middleware 2025-11-05 21:01:20 +08:00
model Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
rag Update rag-server default base URL to 8090 (#528) 2025-10-15 15:25:06 +08:00
service Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
stats Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
subscription Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00
xray Refactor server layout to rag-server (#525) 2025-10-15 13:04:58 +08:00