fix: auth login ways

internal/controllers/auth_controller.go

@@ -29,6 +29,22 @@ type loginAttempt struct {
 
 var loginAttempts sync.Map
 
+func init() {
+	// 定期清理过期的登录尝试统计，防止内存溢出
+	go func() {
+		ticker := time.NewTicker(30 * time.Minute)
+		for range ticker.C {
+			loginAttempts.Range(func(key, value any) bool {
+				attempt := value.(*loginAttempt)
+				if time.Since(attempt.LastAttempt) > 10*time.Minute {
+					loginAttempts.Delete(key)
+				}
+				return true
+			})
+		}
+	}()
+}
+
 func NewAuthController(userService *services.UserService, settingsService *services.SettingsService, loginLogService *services.LoginLogService) *AuthController {
 	return &AuthController{
 		userService:     userService,
@@ -107,7 +123,7 @@ func (ac *AuthController) Login(c *gin.Context) {
 	}
 
 	// 生成 token
-	token, err := utils.GenerateToken(user.ID, user.Username, expireDays, constant.Secret)
+	token, err := utils.GenerateToken(user.ID, user.Username, user.TokenVersion, expireDays, constant.Secret)
 	if err != nil {
 		eventbus.DefaultBus.Publish(eventbus.Event{
 			Type: constant.EventUserLogin,
@@ -144,6 +160,9 @@ func (ac *AuthController) Login(c *gin.Context) {
 }
 
 func (ac *AuthController) Logout(c *gin.Context) {
+	if userID, exists := c.Get("userID"); exists {
+		ac.userService.InvalidateUserTokens(userID.(string))
+	}
 	middleware.ClearAuthCookie(c)
 	utils.SuccessMsg(c, "退出成功")
 }