From 5fbf84bf8eddb02c2cfdd9a5a3b6fb50e5c8ec1a Mon Sep 17 00:00:00 2001
From: Max <shadow.iqka@qq.com>
Date: Sat, 13 May 2023 11:23:16 +0800
Subject: [PATCH] [fix] Neo api guard

---
 neo/neo.go           |  2 +-
 studio/middleware.go | 16 ++--------------
 2 files changed, 3 insertions(+), 15 deletions(-)

diff --git a/neo/neo.go b/neo/neo.go
index 0390d6c5..87faeec8 100644
--- a/neo/neo.go
+++ b/neo/neo.go
@@ -382,7 +382,7 @@ func (neo *DSL) setGuard(router *gin.Engine) error {
 
 	if neo.Guard == "" {
 		router.Use(func(c *gin.Context) {
-			token := c.Query("token")
+			token := strings.TrimSpace(strings.TrimPrefix(c.Query("token"), "Bearer "))
 			if token == "" {
 				c.JSON(403, gin.H{"message": "token is required", "code": 403})
 				c.Abort()
diff --git a/studio/middleware.go b/studio/middleware.go
index 5b769e04..f0728efb 100644
--- a/studio/middleware.go
+++ b/studio/middleware.go
@@ -65,20 +65,8 @@ func hdAuth(c *gin.Context) {
 	tokenString := c.Request.Header.Get("Authorization")
 
 	// Get token from query
-	if tokenString == "" {
-
-		// Temporary solution (will be removed in the future)
-		tokenString = strings.TrimSpace(strings.TrimPrefix(c.Query("token"), "Bearer "))
-		if tokenString == "" {
-			c.JSON(403, gin.H{"code": 403, "message": "No permission"})
-			c.Abort()
-			return
-		}
-
-		claims := helper.JwtValidate(tokenString, []byte(config.Conf.JWTSecret))
-		c.Set("__sid", claims.SID)
-		c.Next()
-		return
+	if c.Query("studio") != "" {
+		tokenString = c.Query("studio")
 	}
 
 	if strings.HasPrefix(tokenString, "Bearer") {