multica/server/internal/middleware
Jiayuan f4a6e7c475 refactor(server): consolidate workspace permission checks into middleware
Move workspace membership and role validation from individual handlers
into dedicated Chi middleware. The new middleware resolves workspace ID
(from query param, X-Workspace-ID header, or URL param), validates
membership via DB, and injects the member into request context.

Handlers now read workspace ID and member from context instead of
calling requireWorkspaceMember/requireWorkspaceRole directly. This
eliminates ~17 duplicated permission checks across handlers and makes
it harder to accidentally omit access control on new routes.
2026-03-30 03:40:20 +08:00
..
auth.go feat(auth): email verification login and personal access tokens 2026-03-26 14:32:30 +08:00
auth_test.go feat(auth): email verification login and personal access tokens 2026-03-26 14:32:30 +08:00
request_logger.go feat(logging): add structured logging across server and SDK 2026-03-26 10:57:11 +08:00
workspace.go refactor(server): consolidate workspace permission checks into middleware 2026-03-30 03:40:20 +08:00