From dc9ebdbf695d685768b622fdba0be3ba5714d4ab Mon Sep 17 00:00:00 2001
From: duorameng <2997944583@qq.com>
Date: Mon, 27 Apr 2026 14:35:22 +0800
Subject: [PATCH] chore: update ws security

---
 internal/controllers/auth_controller.go | 1 -
 internal/middleware/auth.go             | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/internal/controllers/auth_controller.go b/internal/controllers/auth_controller.go
index 98c24d6..433c123 100644
--- a/internal/controllers/auth_controller.go
+++ b/internal/controllers/auth_controller.go
@@ -9,7 +9,6 @@ import (
 	"github.com/engigu/baihu-panel/internal/constant"
 	"github.com/engigu/baihu-panel/internal/eventbus"
 	"github.com/engigu/baihu-panel/internal/middleware"
-	"github.com/engigu/baihu-panel/internal/models/vo"
 	"github.com/engigu/baihu-panel/internal/services"
 	"github.com/engigu/baihu-panel/internal/utils"
 
diff --git a/internal/middleware/auth.go b/internal/middleware/auth.go
index 18b246d..9c51134 100644
--- a/internal/middleware/auth.go
+++ b/internal/middleware/auth.go
@@ -27,7 +27,7 @@ func AuthRequired() gin.HandlerFunc {
 				origin = c.GetHeader("Referer")
 			}
 			// 如果有 Origin 且不匹配则拒绝（实际部署时应配置允许的 Origin）
-			if origin != "" && !utils.CheckWSOrigin(c.Writer, c.Request) {
+			if origin != "" && !utils.CheckWSOrigin(c.Request) {
 				utils.Forbidden(c, "CSRF 校验失败: 非法的请求来源")
 				c.Abort()
 				return