质量优化

internal/model/auth_source.go

@@ -221,16 +221,16 @@ func DeleteAuthSource(id uint64) error {
 }
 
 // FindExternalAccount 查找外部帐号绑定记录
-func FindExternalAccount(sourceID uint64, externalID string) (*ExternalAccount, error) {
+func FindExternalAccount(ctx context.Context, sourceID uint64, externalID string) (*ExternalAccount, error) {
 	var account ExternalAccount
-	if err := db.DB(context.Background()).Where("auth_source_id = ? AND external_id = ?", sourceID, externalID).First(&account).Error; err != nil {
+	if err := db.DB(ctx).Where("auth_source_id = ? AND external_id = ?", sourceID, externalID).First(&account).Error; err != nil {
 		return nil, err
 	}
 	return &account, nil
 }
 
 // BindExternalAccount 绑定外部帐号（已存在时更新用户名和邮箱）
-func BindExternalAccount(account *ExternalAccount) error {
+func BindExternalAccount(ctx context.Context, account *ExternalAccount) error {
 	if account.UserID == 0 || strings.TrimSpace(account.ExternalID) == "" {
 		return errors.New(errExternalAccountBindingIncomplete)
 	}
@@ -238,7 +238,7 @@ func BindExternalAccount(account *ExternalAccount) error {
 	account.ExternalUsername = strings.TrimSpace(account.ExternalUsername)
 	account.Email = strings.TrimSpace(account.Email)
 
-	return db.DB(context.Background()).Transaction(func(tx *gorm.DB) error {
+	return db.DB(ctx).Transaction(func(tx *gorm.DB) error {
 		var current ExternalAccount
 		err := tx.Where("auth_source_id = ? AND external_id = ?", account.AuthSourceID, account.ExternalID).First(&current).Error
 		if err == nil {

internal/model/errs.go

@@ -21,7 +21,7 @@ const (
 	errAuthSourceNameInvalid                = "认证源名称只能包含字母、数字、短横线或下划线，且必须以字母或数字开头"
 	errAuthSourceTypeUnsupported            = "认证源类型仅支持 oidc"
 	errAuthSourceDiscoveryURLRequired       = "OIDC 认证源必须配置 Discovery URL"
-	errAuthSourceClientCredentialsRequired  = "启用认证源前必须配置 Client ID 和 Client Secret"
+	errAuthSourceClientCredentialsRequired  = "启用认证源前必须配置 Client ID 和 Client Secret" //nolint:gosec // false positive: this is an error message, not hardcoded credentials
 	errAuthSourceIDRequired                 = "认证源 ID 不能为空"
 	errExternalAccountBindingIncomplete     = "外部账号绑定信息不完整"
 	errExternalAccountAlreadyBoundToAnother = "该外部账号已绑定到其他用户"

internal/model/system_configs.go

@@ -26,14 +26,14 @@ const (
 	ConfigKeyRegistrationEnabled              = "registration_enabled"                // 是否允许注册
 	ConfigKeyPasswordRegisterEnabled          = "password_register_enabled"           // 是否允许密码注册
 	ConfigKeyOIDCLoginEnabled                 = "oidc_login_enabled"                  // 是否允许 OIDC 登录
-	ConfigKeyMaxAPIKeysPerUser                = "max_api_keys_per_user"               // 每个用户最大 API Key 数量
+	ConfigKeyMaxAPIKeysPerUser                = "max_api_keys_per_user"               //nolint:gosec // false positive: config key name. 每个用户最大 API Key 数量
 	ConfigKeyCapLoginEnabled                  = "cap_login_enabled"                   // 是否启用登录人机验证
 	ConfigKeyCapAutoSolve                     = "cap_auto_solve"                      // 打开页面后是否自动开始计算（false 则需用户手动点击）
 	ConfigKeyCapChallengeCount                = "cap_challenge_count"                 // 客户端需求解的 PoW 难题总数，默认 1，推荐 1～5
 	ConfigKeyCapChallengeSize                 = "cap_challenge_size"                  // 人机验证盐值长度
 	ConfigKeyCapChallengeDifficulty           = "cap_challenge_difficulty"            // 人机验证 PoW 难度（目标前缀长度）
 	ConfigKeyCapChallengeTTL                  = "cap_challenge_ttl_seconds"           // 人机验证难题有效时间（秒）
-	ConfigKeyCapTokenTTL                      = "cap_token_ttl_seconds"               // 人机验证兑换凭证有效时间（秒）
+	ConfigKeyCapTokenTTL                      = "cap_token_ttl_seconds"               //nolint:gosec // false positive: config key name. 人机验证兑换凭证有效时间（秒）
 	ConfigKeyServerAddress                    = "server_address"                      // 服务器地址
 	ConfigKeySMTPHost                         = "smtp_host"                           // SMTP 服务器地址
 	ConfigKeySMTPPort                         = "smtp_port"                           // SMTP 端口