fix26: полный прод-фикс auth/jwt, import-export peer и frontend flow

2026-05-09 01:18:13 +05:00
parent 7a64d76d08
commit c13841b61a
19 changed files with 390 additions and 90 deletions
@@ -28,11 +28,26 @@ func JWTHandler() gin.HandlerFunc {
 			c.Abort()
 			return
 		}
-		if myClaims.Admin.Deleted != 0 {
+		admin, err := service.GetAdminForTokenValidation(myClaims.Admin.Id)
+		if err != nil {
+			vo.Fail(err.Error(), c)
+			c.Abort()
+			return
+		}
+		if admin.Status != nil && *admin.Status != 1 {
 			vo.Fail("this account has been disabled", c)
 			c.Abort()
 			return
 		}
+		tokenVersion := int64(1)
+		if admin.TokenVersion != nil && *admin.TokenVersion > 0 {
+			tokenVersion = *admin.TokenVersion
+		}
+		if myClaims.Admin.TokenVersion != tokenVersion {
+			vo.Fail(constant.IllegalTokenError, c)
+			c.Abort()
+			return
+		}
 		c.Next()
 	}
 }