[优化] POW 系统接口方案

openflare-server/utils/cap/middleware.go

@@ -0,0 +1,40 @@
+package cap
+
+import (
+	"net/http"
+
+	"github.com/gin-gonic/gin"
+)
+
+// VerifyMiddleware returns a Gin middleware that checks and consumes the X-Cap-Token header.
+// enabledFunc is an optional callback allowing dynamic check of whether captcha protection is turned on.
+func (m *Manager) VerifyMiddleware(scope string, enabledFunc func() bool) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if enabledFunc != nil && !enabledFunc() {
+			c.Next()
+			return
+		}
+
+		token := c.GetHeader("X-Cap-Token")
+		if token == "" {
+			c.JSON(http.StatusUnauthorized, gin.H{
+				"success": false,
+				"error":   "验证码验证失败，缺少验证码凭证",
+			})
+			c.Abort()
+			return
+		}
+
+		valid, err := m.VerifyToken(c.Request.Context(), token, scope)
+		if err != nil || !valid {
+			c.JSON(http.StatusUnauthorized, gin.H{
+				"success": false,
+				"error":   "验证码校验失败或已过期，请重试",
+			})
+			c.Abort()
+			return
+		}
+
+		c.Next()
+	}
+}