Archive the differentiated YuXinGu product docs, AI engineering system, design contract, and Go/Vue scaffold. Next execution prioritizes Cece-parity over early innovation (see .ai/product/STRATEGY.md). Co-authored-by: Cursor <cursoragent@cursor.com>
295 B
295 B
Pattern: JWT / Bearer
Middleware
- Read
Authorization: Bearer <token> - Parse/verify
- Put
user_idinto context - Reject with code in 1xxxx if missing/invalid
Service
Always take userID from context for mutating ops.
Never trust body user_id from client for ownership.